v1.13.4: Standardize all route responses to use response helpers

Convert ~160 raw res.json()/res.status().json() calls across 32+ files
to use centralized helpers from src/utils/responses.js (ok, errorResponse,
successMessage, notFound, validationError, forbidden, unauthorized, conflict).

No behavior changes — response shapes are identical. Future schema changes
(e.g., requestId envelope) only need to update one module.

Fix error vs errorResponse signature mismatch in routes/health.js CA cert
endpoint where error(res, message, statusCode) was being called with
errorResponse(res, statusCode, message, extras) argument order.

Files changed: middleware.js, csrf-protection.js, error-handler.js,
license-manager.js, src/app.js, and 27 route files.

Test suite: 755 pass / 4 pre-existing failures (services credential tests).

dashcaddy-api/routes/apps/compose.js

@@ -3,6 +3,7 @@ const yaml = require('js-yaml');
 const { DOCKER, REGEX } = require('../../constants');
 const { ValidationError } = require('../../errors');
 const platformPaths = require('../../platform-paths');
+const { ok } = require('../../src/utils/responses');
 
 /**
  * Docker Compose import routes
@@ -162,7 +163,7 @@ module.exports = function({ docker, caddy, servicesStateManager, portLockManager
     }
     const name = (stackName || 'stack').replace(/[^a-zA-Z0-9_-]/g, '').substring(0, 32) || 'stack';
     const result = parseCompose(yamlStr, name);
-    res.json({ success: true, ...result });
+    ok(res, { ...result });
   }, 'compose-import'));
 
   // POST /deploy-compose — deploy parsed services
@@ -300,7 +301,7 @@ module.exports = function({ docker, caddy, servicesStateManager, portLockManager
       results.push({ type: 'container', name: svc.name, status: 'skipped', reason: svc.reason });
     }
 
-    res.json({ success: true, results, stackName: stackName || prefix });
+    ok(res, { results, stackName: stackName || prefix });
   }, 'compose-deploy'));
 
   // DELETE /compose-stack/:stackName — remove an entire stack
@@ -329,7 +330,7 @@ module.exports = function({ docker, caddy, servicesStateManager, portLockManager
     });
     await servicesStateManager.update(data => { data.services = updated; });
 
-    res.json({ success: true, removed, count: removed.length });
+    ok(res, { removed, count: removed.length });
   }, 'compose-stack-delete'));
 
   return router;