feat: define module HTTP routes

Phase 5B, pass 1: framework-neutral module HTTP route contracts and runtime
registration. Adds @ekklesia/contracts' module-http.ts (methods, canonical
path grammar, route definition/context/handler types, and validation)
and Core's module runtime staging/publication of a module's declared
routes alongside its capabilities, gated on the module's own manifest
permissions. Routes are collected into StartedModuleRuntime as an
immutable snapshot but are not yet mounted into apps/api; that is pass 2.

Co-Authored-By: Claude Sonnet 5 <[email protected]>

templates/module/tests/manifest.test.ts

@@ -70,6 +70,11 @@ describe("module template", () => {
           return undefined;
         },
       },
+      http: {
+        route() {
+          throw new Error("The template does not register any HTTP route.");
+        },
+      },
       moduleId: "example",
     });