feat(p9): real-egress proof (env-gated HttpProvider) + /health bindings + smoke

Task 9.5: /health now reports the egress provider backing each channel (sandbox
vs http). scripts/smoke-capability.mjs proves the slice end to end: sandbox egress
SENT through the broker; EMAIL routed to the env-gated HttpProvider and actually
delivered to a LOCAL echo server (real egress, no external network, no credentials);
idempotent replay; /health bindings. App wires CapabilityModule.

P9 slice-1 verification: 103 tests green, pnpm -r build all packages+demos,
boundary clean, capability smoke PASS, all prior smokes (realtime/inbox/support/
adapter/route/ai/calendar) still PASS through the broker.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

packages/iios-service/src/app.module.ts

@@ -12,6 +12,7 @@ import { AdaptersModule } from './adapters/adapters.module';
 import { RoutingModule } from './routing/routing.module';
 import { AiModule } from './ai/ai.module';
 import { CalendarModule } from './calendar/calendar.module';
+import { CapabilityModule } from './capability/capability.module';
 import { HealthController } from './health.controller';
 import { DevController } from './dev/dev.controller';
 
@@ -30,6 +31,7 @@ import { DevController } from './dev/dev.controller';
     RoutingModule,
     AiModule,
     CalendarModule,
+    CapabilityModule,
   ],
   controllers: [HealthController, DevController],
 })