fix: harden service middleware and shutdown

[darthfork]

Summary

• fix HTTP status recording so middleware captures explicit and implicit response codes correctly
• add graceful shutdown handling for SIGTERM/SIGINT and make router metrics injectable for isolated tests
• reduce hot-path request logging noise by logging successful requests at debug level

Closes #37

Testing

• go test ./...