Toast-ify all error paths in remaining routes

[olafkfreund]

wrap() surfaces structured errors on the API side, but some routes (older ones) still return bare 500s. Audit every route for a consistent { error } shape so the sonner Toaster shows a readable message on every failure.