fix(WP-0014/A2): close remaining pure-param and structural compilation errors

Convert all remaining `<- paramOrNothing / param / paramOrDefault /
currentUserOrNothing` monadic binds to `let` — these functions are pure
(ImplicitParams-based) in IHP v1.5, so `<-` is a type error in an IO
do-block.

Controllers fixed:
  AgentDelegations, AiGovernancePolicies, Annotations, ApiConsumers,
  CollectiveProposals, DecisionRecords, DeploymentRecords,
  HubCapabilityManifests, HubRoutingRules, InstitutionalKnowledge,
  OutcomeCorrelations, RequirementCandidates, TypeRegistries,
  WebhookSubscriptions, Widgets,
  Api/V2/{Annotations,InteractionEvents,Token}

WebhookSubscriptions: remove orphaned `Right () ->` case arm that was
left inside a bare `unless` block (structural parse error).

Also carries forward all in-progress fixes from the working tree:
  helpers (AgentBridge, ApiRateLimit, BottleneckDetector,
            CrossHubPropagation, FrictionScore),
  views (CanSelect instances, HSX lambda extraction, formFor wrappers),
  env/build (envrc GHCi perms, flake.nix Tailwind + GHC resource limits,
             static/app.css additional Tailwind output).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Web/View/WebhookSubscriptions/New.hs

@@ -27,7 +27,7 @@ instance View NewView where
             <h1 class="text-2xl font-semibold mb-2">New Webhook Subscription</h1>
             <p class="text-sm text-gray-500 mb-6">Consumer: <strong>{consumer.name}</strong></p>
             <form method="POST" action={CreateWebhookSubscriptionAction} class="space-y-4">
-                {hiddenField #id}
+                <input type="hidden" name="id" value={show subscription.id} />
                 <input type="hidden" name="apiConsumerId" value={show consumer.id} />
                 <div>
                     <label class="block text-sm font-medium text-gray-700 mb-1">Event Topic *</label>
@@ -37,7 +37,8 @@ instance View NewView where
                 </div>
                 <div>
                     <label class="block text-sm font-medium text-gray-700 mb-1">Target URL *</label>
-                    {textField #targetUrl}
+                    <input type="text" name="targetUrl" value={subscription.targetUrl}
+                           class="border rounded px-3 py-2 text-sm w-full" required />
                     <p class="text-xs text-gray-400 mt-1">Must be HTTPS. IHF will POST JSON payloads with X-IHF-Signature header.</p>
                 </div>
                 <div class="pt-2 flex gap-3">