main
Add Rhai scripting layer: host functions (db/hash/jwt), per-script transactions
Add hot reload via file watcher; fix cross-cutting middleware to wrap merged router