Rank OpenAPI operations for agents from intent fit, schema clarity, auth burden, cost, and safety risk