refactor(app): collapse feature wiring into per-feature Module builders

[allisson]

Summary

Deepens the composition root (internal/app). Each feature now owns one build<Feature>Module that assembles use case → handler → Route Module in one place, replacing the scattered field + accessor + init triple that every handler and repository carried.

• Handlers are no longer Container fields — built as locals inside the feature builders.
• Repositories are no longer Container fields — built inline inside each use case's init (single consumer, stateless over *sql.DB).
• Use cases stay as memoized once[T] fields (both the HTTP path and the CLI consume them).
• The per-route authorizer becomes a shared Authorizer() accessor, so builders fetch it without threading.
• initHTTPServer drops from ~12 dependency fetches to three (db, tokenUseCase, metricsProvider) plus a four-builder loop.
• buildAuthModule builds its optional token rate limiter last, so the error paths never start its background goroutine.

Net: drops 8 handler + 7 repository fields/accessors/inits; adds 4 builders + 1 authorizer accessor. −232 lines.

Docs: the internal/app/README.md dependency graph and "adding components" section are updated to the builder pattern (and a stale initErrors-map example that never matched once[T] is corrected).

Validation

• go build ./... — clean
• make test — 1250 tests pass (41 packages, race enabled)
• go vet -tags integration ./test/integration/... — clean
• make lint — 0 issues, govulncheck 0 vulnerabilities
• make docs-lint — 0 errors

Notes

• No behavior change — pure wiring refactor. di_test.go now asserts at the module seam; the audit-log signature integration test builds its own repository from the container DB.
• Out of scope (deliberately deferred): renaming di_crypto.go (it wires keyring/KEK, not transit crypto).

🤖 Generated with Claude Code