Remove render_to_sx from public API: enforce sx_call for all service code

Replace ~250 render_to_sx calls across all services with sync sx_call,
converting many async functions to sync where no other awaits remained.
Make render_to_sx/render_to_sx_with_env private (_render_to_sx).
Add (post-header-ctx) IO primitive and shared post/post-admin defmacros.
Convert built-in post/post-admin layouts from Python to register_sx_layout
with .sx defcomps. Remove dead post_admin_mobile_nav_sx.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

events/bp/slot/routes.py

@@ -36,7 +36,7 @@ def register():
         if not slot:
             return await make_response("Not found", 404)
         from sxc.pages.slots import render_slot_edit_form
-        return sx_response(await render_slot_edit_form(slot, g.calendar))
+        return sx_response(render_slot_edit_form(slot, g.calendar))
 
     @bp.get("/view/")
     @require_admin
@@ -45,7 +45,7 @@ def register():
         if not slot:
             return await make_response("Not found", 404)
         from sxc.pages.slots import render_slot_main_panel
-        return sx_response(await render_slot_main_panel(slot, g.calendar))
+        return sx_response(render_slot_main_panel(slot, g.calendar))
 
     @bp.delete("/")
     @require_admin
@@ -54,7 +54,7 @@ def register():
         await svc_delete_slot(g.s, slot_id)
         slots = await svc_list_slots(g.s, g.calendar.id)
         from sxc.pages.slots import render_slots_table
-        return sx_response(await render_slots_table(slots, g.calendar))
+        return sx_response(render_slots_table(slots, g.calendar))
 
     @bp.put("/")
     @require_admin
@@ -136,7 +136,7 @@ def register():
             ), 422
 
         from sxc.pages.slots import render_slot_main_panel
-        return sx_response(await render_slot_main_panel(slot, g.calendar, oob=True))
+        return sx_response(render_slot_main_panel(slot, g.calendar, oob=True))