Command api_surface prints the exported API surface of every package
directory in this module, at any depth. Output is deterministic;
scripts/check_api.py diffs it against the locks in api/. Run `make
api-update` to accept a deliberate surface change.