fix(WP-0014/A2): close remaining pure-param and structural compilation errors

Convert all remaining `<- paramOrNothing / param / paramOrDefault /
currentUserOrNothing` monadic binds to `let` — these functions are pure
(ImplicitParams-based) in IHP v1.5, so `<-` is a type error in an IO
do-block.

Controllers fixed:
  AgentDelegations, AiGovernancePolicies, Annotations, ApiConsumers,
  CollectiveProposals, DecisionRecords, DeploymentRecords,
  HubCapabilityManifests, HubRoutingRules, InstitutionalKnowledge,
  OutcomeCorrelations, RequirementCandidates, TypeRegistries,
  WebhookSubscriptions, Widgets,
  Api/V2/{Annotations,InteractionEvents,Token}

WebhookSubscriptions: remove orphaned `Right () ->` case arm that was
left inside a bare `unless` block (structural parse error).

Also carries forward all in-progress fixes from the working tree:
  helpers (AgentBridge, ApiRateLimit, BottleneckDetector,
            CrossHubPropagation, FrictionScore),
  views (CanSelect instances, HSX lambda extraction, formFor wrappers),
  env/build (envrc GHCi perms, flake.nix Tailwind + GHC resource limits,
             static/app.css additional Tailwind output).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Web/Controller/InteractionEvents.hs

@@ -5,6 +5,7 @@ import Generated.Types
 import IHP.Prelude
 import IHP.ControllerPrelude
 import Data.Aeson (object, (.=), decode, Value)
+import Data.Coerce (coerce)
 import qualified Data.Aeson as A
 import qualified Data.Text as T
 import qualified Data.ByteString.Lazy.Char8 as LBSC
@@ -22,17 +23,16 @@ validEventTypes =
 
 instance Controller InteractionEventsController where
     action CreateInteractionEventAction { widgetId } = do
-        eventType <- param @Text "event_type"
+        let eventType = param @Text "event_type"
         unless (eventType `elem` validEventTypes) do
             renderJsonWithStatusCode status422 (object ["error" .= ("unknown event_type" :: Text), "valid" .= validEventTypes])
 
-        mUser <- currentUserOrNothing
-        let actorId   = fmap (.id) mUser
-            actorType = maybe "anonymous" (const "user") mUser
-
-        actorTypeParam <- paramOrDefault @Text actorType "actor_type"
-        viewContextRef <- paramOrNothing @Text "view_context_ref"
-        metadataRaw    <- paramOrDefault @Text "{}" "metadata"
+        let mUser = currentUserOrNothing
+        let actorId        = fmap (.id) mUser
+            actorType      = maybe "anonymous" (const "user") mUser
+            actorTypeParam = paramOrDefault @Text actorType "actor_type"
+            viewContextRef = paramOrNothing @Text "view_context_ref"
+            metadataRaw    = paramOrDefault @Text "{}" "metadata"
 
         let metadata = case decode (LBSC.pack (cs metadataRaw)) of
                 Just v  -> v
@@ -41,7 +41,7 @@ instance Controller InteractionEventsController where
         event <- newRecord @InteractionEvent
             |> set #widgetId       widgetId
             |> set #eventType      eventType
-            |> set #actorId        (fmap toUUID actorId)
+            |> set #actorId        (coerce actorId)
             |> set #actorType      actorTypeParam
             |> set #viewContextRef viewContextRef
             |> set #metadata       metadata