feat: add public search controls

Add public category lookup options, allowlisted sort ordering, URL-backed catalog controls, and strict search route validation with regression tests.

apps/api/src/modules/inventory/routes/public-lookup-routes.js

@@ -0,0 +1,7 @@
+export async function registerPublicLookupRoutes(app, options) {
+  const { catalogLookupRepository } = options;
+
+  app.get('/public/lookups/categories', async () => ({
+    data: await catalogLookupRepository.listCategories(),
+  }));
+}