fix: correct 48 API permission annotations in OpenAPI specs

Many operations incorrectly documented "None — any valid app_key"
permissions when they actually require specific account permissions
per permission_test.go. Cross-referenced all 214 operations against
the permission factor registry and fixed the 48 mismatches in both
openapi.en.json and openapi.zh.json.

Affected modules: Members, Schedules, Calendars, Routes, Enrichment,
Mappings, and Analytics.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: ysyneu