feat: wire up all missing API routes — packages, wiki, notifications, bounties, governance, forum, chat, kanban, epics, deployments, time tracking, service desk, secrets, certs, maintainers, identity, trust, sync, IPFS, names, mirrors, workspaces

- Added extended handler with 60+ API endpoints
- Fixed security: hashKey now uses SHA-256
- All MCP tools now have corresponding daemon endpoints
- Full CRUD for all features

Author: Patel230