"""Application services — importable domain logic shared by API, worker, and CLI."""