fix(WP-0014/A2): close remaining pure-param and structural compilation errors

Convert all remaining `<- paramOrNothing / param / paramOrDefault /
currentUserOrNothing` monadic binds to `let` — these functions are pure
(ImplicitParams-based) in IHP v1.5, so `<-` is a type error in an IO
do-block.

Controllers fixed:
  AgentDelegations, AiGovernancePolicies, Annotations, ApiConsumers,
  CollectiveProposals, DecisionRecords, DeploymentRecords,
  HubCapabilityManifests, HubRoutingRules, InstitutionalKnowledge,
  OutcomeCorrelations, RequirementCandidates, TypeRegistries,
  WebhookSubscriptions, Widgets,
  Api/V2/{Annotations,InteractionEvents,Token}

WebhookSubscriptions: remove orphaned `Right () ->` case arm that was
left inside a bare `unless` block (structural parse error).

Also carries forward all in-progress fixes from the working tree:
  helpers (AgentBridge, ApiRateLimit, BottleneckDetector,
            CrossHubPropagation, FrictionScore),
  views (CanSelect instances, HSX lambda extraction, formFor wrappers),
  env/build (envrc GHCi perms, flake.nix Tailwind + GHC resource limits,
             static/app.css additional Tailwind output).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Web/View/WidgetPatterns/Edit.hs

@@ -23,7 +23,6 @@ instance View EditView where
         <h1 class="text-2xl font-semibold mb-6">Edit Pattern</h1>
 
         <form method="POST" action={UpdateWidgetPatternAction (pattern.id)}>
-            {csrfTokenFormField}
             <div class="space-y-4 max-w-lg">
                 <div>
                     <label class="block text-sm font-medium text-gray-700 mb-1">Name</label>

Web/View/WidgetPatterns/New.hs

@@ -27,7 +27,6 @@ instance View NewView where
 renderForm :: WidgetPattern -> [Hub] -> [(Text, Text)] -> Html
 renderForm pattern hubs widgetTypes = [hsx|
     <form method="POST" action={CreateWidgetPatternAction}>
-        {csrfTokenFormField}
         <div class="space-y-4 max-w-lg">
             <div>
                 <label class="block text-sm font-medium text-gray-700 mb-1">Name</label>

Web/View/WidgetPatterns/Show.hs

@@ -139,14 +139,13 @@ renderPublishNewVersionForm True pid = [hsx|
     <div class="border-t border-gray-200 pt-4">
         <h2 class="text-base font-semibold mb-3">Publish New Version</h2>
         <form method="POST" action={PublishNewVersionAction (pid)}>
-            {csrfTokenFormField}
             <div class="mb-3">
                 <label class="block text-sm font-medium text-gray-700 mb-1">
                     Definition (JSON)
                 </label>
                 <textarea name="definition" rows="4"
                     class="w-full border border-gray-300 rounded px-3 py-2 text-sm font-mono"
-                    placeholder='{"key": "value"}'></textarea>
+                    placeholder="JSON definition"></textarea>
             </div>
             <div class="mb-3">
                 <label class="block text-sm font-medium text-gray-700 mb-1">Changelog</label>