hub_kernel-api gives any hub built on hub_kernel a JSON API: the host lists the hubs it serves, and every call goes through the host's sign-in, permission check and account scope.