fix(WP-0014/A2): close remaining pure-param and structural compilation errors

Convert all remaining `<- paramOrNothing / param / paramOrDefault /
currentUserOrNothing` monadic binds to `let` — these functions are pure
(ImplicitParams-based) in IHP v1.5, so `<-` is a type error in an IO
do-block.

Controllers fixed:
  AgentDelegations, AiGovernancePolicies, Annotations, ApiConsumers,
  CollectiveProposals, DecisionRecords, DeploymentRecords,
  HubCapabilityManifests, HubRoutingRules, InstitutionalKnowledge,
  OutcomeCorrelations, RequirementCandidates, TypeRegistries,
  WebhookSubscriptions, Widgets,
  Api/V2/{Annotations,InteractionEvents,Token}

WebhookSubscriptions: remove orphaned `Right () ->` case arm that was
left inside a bare `unless` block (structural parse error).

Also carries forward all in-progress fixes from the working tree:
  helpers (AgentBridge, ApiRateLimit, BottleneckDetector,
            CrossHubPropagation, FrictionScore),
  views (CanSelect instances, HSX lambda extraction, formFor wrappers),
  env/build (envrc GHCi perms, flake.nix Tailwind + GHC resource limits,
             static/app.css additional Tailwind output).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Web/Job/WebhookDeliveryJob.hs

@@ -65,7 +65,7 @@ attempt sub payload attemptNo = do
                 attempt sub payload (attemptNo + 1)
         Left ex -> do
             recordDelivery sub payload 0 latencyMs "failed"
-                (Just (T.pack (show ex)))
+                (Just (show ex))
             when (attemptNo < 3) $
                 attempt sub payload (attemptNo + 1)
 
@@ -85,7 +85,7 @@ recordDelivery sub payload responseCode latencyMs status mError = do
         \VALUES (uuid_generate_v4(), ?, ?::jsonb, NOW(), ?, \
         \        NULLIF(?, 0), ?, ?)"
         ( sub.id
-        , encode payload
+        , LBS.toStrict (encode payload)
         , status
         , responseCode
         , Just latencyMs