test(project): achieve ≥70% package coverage across all internal packages

- store/sqlite: 75.4% (repos + db coverage)
- host/sub2api: 80.8% (httptest mock server, pure function tests)
- app: 74.2% (handler error paths, NewActionSet closures)
- pack: 72.4%
- provision: 75.2%
- access: 77.3%
- config: 94.7% (lookup mock tests)

All tests pass: build, vet, race, coverage gates.

cmd/server/main_test.go

@@ -9,7 +9,7 @@ import (
 )
 
 func TestRunCallsApplicationServerRunnerAfterBootstrap(t *testing.T) {
-	serverApp := app.NewServer("127.0.0.1:0", nil)
+	serverApp := app.NewServer("127.0.0.1:0", nil, nil)
 	bootstrapCalled := false
 	runnerCalled := false
 
@@ -60,7 +60,7 @@ func TestRunReturnsBootstrapError(t *testing.T) {
 
 func TestRunReturnsApplicationRunError(t *testing.T) {
 	wantErr := errors.New("server run failed")
-	serverApp := app.NewServer("127.0.0.1:0", nil)
+	serverApp := app.NewServer("127.0.0.1:0", nil, nil)
 
 	err := run(
 		context.Background(),