Title
refactor: modularize backend into router, controller, and service layers
Body
backend/server.js mixes routing and business logic, making maintenance difficult. Refactor into clear modules.
Acceptance Criteria
server.js only handles bootstrapping and middleware.
- Route handlers are separated by feature domain.
- No behavior regressions in existing endpoints.