1e981910

By: Michael Lynch <git@mtlynch.io>

Reduce duplication in routes with subrouters

Use a subrouter for API routes so requireAuthenticationAPI is applied
once, and a subrouter for view routes so requireAuthentication and
enforceContentSecurityPolicy are applied once.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>