fix: migrate DetectPolicySensitivityAction to routed agent pattern

The last action still calling callClaudeApi directly. Now routes through
resolveAgent (task_type="policy_sensitivity") + checkGovernancePolicy +
callAgent, consistent with all other Phase 11 AI invocations. Adds
agentRegistrationId, tokensIn, tokensOut to the created AgentProposal and
handles blocked_by_policy the same way as the other 4 actions.

Remove callClaudeApi and its direct HTTP imports from
Application/Helper/Controller.hs — no longer referenced anywhere.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Application/Helper/Controller.hs

@@ -5,14 +5,6 @@ import Generated.Types
 import Data.Time.Clock (addUTCTime)
 import Data.List (sortBy)
 
--- Phase 5: Anthropic API
-import Network.HTTP.Conduit (newManager, tlsManagerSettings, parseRequest, httpLbs, responseBody, method, requestHeaders, requestBody, RequestBodyLBS(..))
-import Data.Aeson (object, (.=), encode, eitherDecode, Value)
-import Data.Aeson.Lens (key, _String, nth)
-import Control.Lens ((^?))
-import Data.String.Conversions (cs)
-import System.Environment (lookupEnv)
-
 -- Here you can add functions which are available in all your controllers
 
 -- | Returns the set of widget IDs that are currently in regression.
@@ -78,51 +70,3 @@ widgetCycleCounts candidates requirements decisions deployments =
             , any (\c -> c.createdAt > deplTime) widCandidates
             ]
 
--- | Call the Anthropic Messages API.
---
--- Returns the text content of the first content block, or an error message.
--- API key read from IHP_ANTHROPIC_API_KEY env var.
--- On any error (missing key, HTTP failure, unexpected JSON) returns Left with a description.
-callClaudeApi
-    :: Text   -- ^ system prompt
-    -> Text   -- ^ user message
-    -> Int    -- ^ max_tokens
-    -> IO (Either Text Text)
-callClaudeApi systemPrompt userMessage maxTokens = do
-    mApiKey <- lookupEnv "IHP_ANTHROPIC_API_KEY"
-    case mApiKey of
-        Nothing -> pure (Left "IHP_ANTHROPIC_API_KEY is not set")
-        Just apiKey -> do
-            let url = "https://api.anthropic.com/v1/messages"
-            let body = object
-                    [ "model"      .= ("claude-sonnet-4-6" :: Text)
-                    , "max_tokens" .= maxTokens
-                    , "system"     .= systemPrompt
-                    , "messages"   .= [ object
-                            [ "role"    .= ("user" :: Text)
-                            , "content" .= userMessage
-                            ] ]
-                    ]
-            let reqBody = RequestBodyLBS (encode body)
-            manager  <- newManager tlsManagerSettings
-            initReq  <- parseRequest url
-            let req = initReq
-                    { method      = "POST"
-                    , requestHeaders =
-                        [ ("content-type",      "application/json")
-                        , ("x-api-key",         cs apiKey)
-                        , ("anthropic-version", "2023-06-01")
-                        ]
-                    , requestBody = reqBody
-                    }
-            resp <- httpLbs req manager
-            let respBody = responseBody resp
-            case eitherDecode respBody of
-                Left err  -> pure (Left ("JSON parse error: " <> cs err))
-                Right val ->
-                    case val ^? key "content" . nth 0 . key "text" . _String of
-                        Just txt -> pure (Right txt)
-                        Nothing  ->
-                            case val ^? key "error" . key "message" . _String of
-                                Just msg -> pure (Left ("API error: " <> msg))
-                                Nothing  -> pure (Left "Unexpected API response shape")