Specifically, after adding an endpoint to an external Nexus API, test_unauthorized_coverage will fail. It needs to be re-run with EXPECTORATE=overwrite. Warning will prevent users from finding out from CI and waiting for another round trip.
While we could automatically run this test from within cargo xtask openapi generate it would significantly slow down that operation as it would require building nexus and running the test even for changes that are not to nexus.