fix(openapi): import the forbidden-code constants from their module, not the application barrel

The barrel also re-exports the authorized use-case layer, which loads
@sim/db at import time. That pulled a database connection into the
OpenAPI spec check, so check:audits failed wherever DATABASE_URL is
absent, including CI.

Author: waleedlatif1

apps/sim/lib/api/contracts/v2/__tests__/cross-cutting.test.ts

@@ -7,7 +7,10 @@ import { v2ListAuditLogsContract } from '@/lib/api/contracts/v2/audit-logs'
 import { ERROR_RESPONSES } from '@/lib/api/contracts/v2/openapi/shared'
 import { v2CreateTableViewContract, v2QueryRowsBodySchema } from '@/lib/api/contracts/v2/tables'
 import { v2GetWorkflowRunContract } from '@/lib/api/contracts/v2/workflows'
-import { FORBIDDEN_DETAIL_CODE_DESCRIPTIONS, FORBIDDEN_DETAIL_CODES } from '@/lib/core/application'
+import {
+  FORBIDDEN_DETAIL_CODE_DESCRIPTIONS,
+  FORBIDDEN_DETAIL_CODES,
+} from '@/lib/core/application/forbidden'
 
 /**
  * The cross-cutting promises that no single resource family owns, and that

apps/sim/lib/api/contracts/v2/openapi/shared.ts

@@ -5,7 +5,10 @@ import type {
   OpenApiHeader,
   OpenApiSecurityScheme,
 } from '@/lib/api/openapi/types'
-import { FORBIDDEN_DETAIL_CODE_DESCRIPTIONS, FORBIDDEN_DETAIL_CODES } from '@/lib/core/application'
+import {
+  FORBIDDEN_DETAIL_CODE_DESCRIPTIONS,
+  FORBIDDEN_DETAIL_CODES,
+} from '@/lib/core/application/forbidden'
 
 export const RATE_LIMIT_HEADERS = [
   'X-RateLimit-Limit',