fix(WP-0014/A2): close remaining pure-param and structural compilation errors

Convert all remaining `<- paramOrNothing / param / paramOrDefault /
currentUserOrNothing` monadic binds to `let` — these functions are pure
(ImplicitParams-based) in IHP v1.5, so `<-` is a type error in an IO
do-block.

Controllers fixed:
  AgentDelegations, AiGovernancePolicies, Annotations, ApiConsumers,
  CollectiveProposals, DecisionRecords, DeploymentRecords,
  HubCapabilityManifests, HubRoutingRules, InstitutionalKnowledge,
  OutcomeCorrelations, RequirementCandidates, TypeRegistries,
  WebhookSubscriptions, Widgets,
  Api/V2/{Annotations,InteractionEvents,Token}

WebhookSubscriptions: remove orphaned `Right () ->` case arm that was
left inside a bare `unless` block (structural parse error).

Also carries forward all in-progress fixes from the working tree:
  helpers (AgentBridge, ApiRateLimit, BottleneckDetector,
            CrossHubPropagation, FrictionScore),
  views (CanSelect instances, HSX lambda extraction, formFor wrappers),
  env/build (envrc GHCi perms, flake.nix Tailwind + GHC resource limits,
             static/app.css additional Tailwind output).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Application/Helper/AgentBridge.hs

@@ -10,6 +10,7 @@ import Data.Aeson (object, (.=), encode, decode, Value, FromJSON(..), (.:), (.:?
 import qualified Data.Aeson as A
 import qualified Data.Aeson.KeyMap as KM
 import qualified Data.Aeson.Key as AK
+import qualified Data.Vector as V
 import qualified Data.ByteString.Lazy as LBS
 import System.Process (readProcessWithExitCode)
 import System.Exit (ExitCode(..))
@@ -171,7 +172,7 @@ callBridgeBatch reqs = do
     let outBytes = LBS.fromStrict (cs stdout)
     case A.decode @A.Value outBytes of
         Just (A.Object o) | Just (A.Array arr) <- KM.lookup (AK.fromString "results") o ->
-            pure $ map parseResult (toList arr)
+            pure $ map parseResult (V.toList arr)
         _ ->
             pure $ replicate (length reqs) (Left (BridgeError "Unparseable batch output" "ParseError"))
   where
@@ -217,5 +218,5 @@ checkGovernancePolicy hubId agentId artifactType = do
 -- | Extract Text values from a JSONB array.
 jsonArrayTexts :: Value -> [Text]
 jsonArrayTexts (A.Array vs) =
-    [ t | A.String t <- toList vs ]
+    [ t | A.String t <- V.toList vs ]
 jsonArrayTexts _ = []