v1.13.4: Standardize all route responses to use response helpers

Convert ~160 raw res.json()/res.status().json() calls across 32+ files
to use centralized helpers from src/utils/responses.js (ok, errorResponse,
successMessage, notFound, validationError, forbidden, unauthorized, conflict).

No behavior changes — response shapes are identical. Future schema changes
(e.g., requestId envelope) only need to update one module.

Fix error vs errorResponse signature mismatch in routes/health.js CA cert
endpoint where error(res, message, statusCode) was being called with
errorResponse(res, statusCode, message, extras) argument order.

Files changed: middleware.js, csrf-protection.js, error-handler.js,
license-manager.js, src/app.js, and 27 route files.

Test suite: 755 pass / 4 pre-existing failures (services credential tests).

dashcaddy-api/routes/auth/keys.js

@@ -1,5 +1,6 @@
 const express = require('express');
 const { ValidationError, ForbiddenError, NotFoundError } = require('../../errors');
+const { ok, successMessage } = require('../../src/utils/responses');
 /**
  * Auth API keys routes factory
  * @param {Object} deps - Explicit dependencies
@@ -39,7 +40,7 @@ module.exports = function({ authManager, asyncHandler, log }) {
     }
 
     const keys = await authManager.listAPIKeys();
-    res.json({ success: true, keys });
+    ok(res, { keys });
   }, 'auth-keys-list'));
 
   // Generate new API key
@@ -66,8 +67,7 @@ module.exports = function({ authManager, asyncHandler, log }) {
       scopes || ['read', 'write']
     );
 
-    res.json({
-      success: true,
+    ok(res, {
       key: keyData.key,
       id: keyData.id,
       name: keyData.name,
@@ -93,7 +93,7 @@ module.exports = function({ authManager, asyncHandler, log }) {
     const success = await authManager.revokeAPIKey(keyId);
 
     if (success) {
-      res.json({ success: true, message: 'API key revoked successfully' });
+      successMessage(res, 'API key revoked successfully');
     } else {
       throw new NotFoundError(`API key ${keyId}`);
     }
@@ -126,8 +126,7 @@ module.exports = function({ authManager, asyncHandler, log }) {
     const expiresInMs = parseExpiration(expiresIn || '24h');
     const expiresAt = new Date(Date.now() + expiresInMs).toISOString();
 
-    res.json({
-      success: true,
+    ok(res, {
       token,
       expiresAt,
       usage: 'Include in Authorization header as: Bearer <token>'