Refactor service ingress from HTTP transport

[edwin-zvs]

Summary

• extract session routing, ownership, deduplication, result reconstruction, and approval handling into a transport-neutral service ingress module
• isolate loopback listener cancellation, per-request bearer authentication, pause checks, HTTP parsing, and JSON responses in an HTTP channel adapter
• preserve live definition reloads, channel rebind/drain behavior, existing persistence and routing, and v1 wire shapes
• add compatibility tests for result and approval JSON

Testing

• cargo test -p construct-daemon (505 passed)
• cargo build
• rustfmt --check --edition 2021 crates/daemon/src/service/http.rs crates/daemon/src/service/ingress.rs
• git diff --check

Review artifacts

No screenshot or recording: this is an internal, behavior-preserving daemon refactor.