refactor(openflare): migrate console APIs to v1 and centralize routing

Move OpenFlare management endpoints to /api/v1/custom/openflare with
Wavelet response envelopes and Abort* error handling. Keep agent, relay,
and flared protocol routes on /api/* with the legacy compat format.

- Add apiutil helpers and Swagger annotations for console handlers
- Register all OpenFlare routes in internal/router/openflare (not apps)
- Switch frontend services to OpenFlareBaseService and v1 paths
- Remove dead auth/compat code and legacy-base.service.ts
- Update integration tests and changelog

Wavelet/frontend/lib/services/openflare/dns-account.service.ts

@@ -1,27 +1,27 @@
-import {LegacyOpenFlareBaseService} from './legacy-base.service';
+import {OpenFlareBaseService} from './base.service';
 import type {DnsAccountItem, DnsAccountMutationPayload} from './types';
 
-export class DnsAccountService extends LegacyOpenFlareBaseService {
-  protected static readonly basePath = '/api/dns-accounts';
+export class DnsAccountService extends OpenFlareBaseService {
+  protected static override readonly basePath: string = '/api/v1/custom/openflare/dns-accounts';
 
   static async list(): Promise<DnsAccountItem[]> {
-    return this.legacyGet<DnsAccountItem[]>('/');
+    return this.get<DnsAccountItem[]>('/');
   }
 
   static async create(
     payload: DnsAccountMutationPayload,
   ): Promise<DnsAccountItem> {
-    return this.legacyPost<DnsAccountItem>('/', payload);
+    return this.post<DnsAccountItem>('/', payload);
   }
 
   static async update(
     id: number,
     payload: DnsAccountMutationPayload,
   ): Promise<DnsAccountItem> {
-    return this.legacyPost<DnsAccountItem>(`/${id}/update`, payload);
+    return this.post<DnsAccountItem>(`/${id}/update`, payload);
   }
 
-  static async delete(id: number): Promise<void> {
-    return this.legacyPost<void>(`/${id}/delete`);
+  static async deleteById(id: number): Promise<void> {
+    return this.post<void>(`/${id}/delete`);
   }
 }