feat(BE, openapi): add GET a DELETE /reservations/{reservationId}