DC-010: Convert remaining bare res.json({success,...}) envelopes to response helper

Routes covered in this batch:
- routes/events.js (1 call: GET /status)
- routes/workflows.js (6 calls: GET/POST/PUT/DELETE /workflows, POST /test, POST /:id/toggle)
- routes/openclaw.js (4 calls: GET /:hostname, DELETE /:hostname, POST /connect, GET /status)
- routes/dns.js (1 call: POST /credentials per-server results envelope)

Wire format unchanged — each handler now produces the same {success, ...} shape via success(). Net result: every {success, ...} envelope in routes/ now flows through the response helper, leaving only the intentional raw-array calls (services.js) and error-path envelopes for separate cleanup.

dashcaddy-api/routes/openclaw.js

@@ -15,6 +15,7 @@ module.exports = function openClawRoutes(ctx) {
   const router = express.Router();
   const docker = ctx.docker;
   const asyncHandler = ctx.asyncHandler;
+  const ok = ctx.ok;
   const log = ctx.log || console;
 
   // ── helpers ──────────────────────────────────────────────────────────────
@@ -115,7 +116,7 @@ module.exports = function openClawRoutes(ctx) {
     const container = await findOpenClawContainer();
 
     if (!container) {
-      return res.json({ success: true, deployed: false });
+      return ok(res, { deployed: false });
     }
 
     const token = await getGatewayToken(container.Id);
@@ -123,8 +124,7 @@ module.exports = function openClawRoutes(ctx) {
     const baseUrl = 'http://localhost:' + port;
     const health = await gatewayHealth(baseUrl, token);
 
-    res.json({
-      success: true,
+    ok(res, {
       deployed: true,
       container: {
         id: container.Id.slice(0, 12),
@@ -196,8 +196,7 @@ module.exports = function openClawRoutes(ctx) {
       await container.start();
       log.info('OpenClaw deployed: ' + container.id.slice(0, 12));
 
-      res.json({
-        success: true,
+      ok(res, {
         deployed: true,
         container: { id: container.id.slice(0, 12), name: name },
         gateway: {
@@ -250,7 +249,7 @@ module.exports = function openClawRoutes(ctx) {
       await c.stop().catch(function() {});
       await c.remove({ force: true });
       log.info('OpenClaw container ' + container.Id.slice(0, 12) + ' removed');
-      res.json({ success: true, message: 'OpenClaw removed' });
+      ok(res, { message: 'OpenClaw removed' });
     } catch(e) {
       log.error('Failed to remove OpenClaw: ' + e.message);
       res.status(500).json({ success: false, error: e.message });