readOnly and writeOnly in OpenAPI: one schema for create, response, and password fields

Most teams model the same resource three times: a User for responses, a CreateUser for requests, and a UpdateUser for patches. The copies drift within a sprint. The response forgets a field the reques