HttpApiBuilder thin handlers

Always implement declared endpoints, including SSE, with HttpApiBuilder.group(...). Keep handlers thin: decode input, read request context, call services, and map transport errors; business rules belong in services. Chose stable layers provided once at the application boundary over Effect.provide(...) inside handlers because broad provisioning rebuilds dependencies, hides ownership, and makes tests drift. Reserve HttpRouter.use(...) for routes outside the API contract.