fix: resolve all GHC 9.10.3 / IHP 1.5 compile errors (all 616 modules load)

Fix 13 modules that blocked compilation on Alpine:

- FrontController: remove annotationLauncherScript helper (IHP Html is a
  constrained type synonym); add (?context, ?request) constraint to
  defaultLayout matching what setLayout expects
- HubCapabilityManifests: switch JSONB fill to paramList+toJSON; fix dynamic
  SQL Text→Query via fromString/cs; void sqlExec; add Control.Monad.void
- Hubs: replace raw Array sqlQuery with filterWhereIn query builder;
  fix isInList validators
- DecisionRecords: remove unregistered DistilDecisionAction; fix hub
  resolution chain via candidateId→sourceWidgetId; BridgeResponse(..)
- RequirementCandidates: BridgeResponse(..); remove @Widget type apps from
  fetchOneOrNothing; void ConfidenceAnnotation createRecord
- AdaptiveThresholds: fix sqlQuery tuple param (Only hubId)
- AgentDelegations, AgentRegistrations, Widgets: BridgeResponse(..)
- Annotations, DeploymentRecords, GovernanceTemplates: minor type fixes
- DecisionRecords/Edit view: extract formAction before HSX block

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Web/Controller/AdaptiveThresholds.hs

@@ -27,7 +27,7 @@ instance Controller AdaptiveThresholdsController where
         weakCats <- sqlQuery
             "SELECT annotation_category FROM outcome_correlations \
             \ WHERE hub_id = ? AND correlation_score < 0.3"
-            [hubId]
+            (Only hubId)
             :: IO [Only Text]
 
         -- Step 2: compute bottleneck threshold override = mean friction score
@@ -46,7 +46,7 @@ instance Controller AdaptiveThresholdsController where
             \       WHERE rc.source_widget_id = w.id \
             \         AND os.signal_type NOT IN ('success','adoption','satisfaction') \
             \   )"
-            [hubId]
+            (Only hubId)
             :: IO [Only (Maybe Double)]
 
         now <- getCurrentTime