host: SX-native wire — reads + write bodies are text/sx, JSON CRUD deleted

Greenfield SX-native pivot (NOT a strangler): the host speaks SX/SXTP end to end;
JSON only at the future ActivityPub federation edge.

- OUTPUT: host/json-status -> host/sx-status — every host/ok/host/error response is
  text/sx via the serialize primitive (NOT application/json). Flips feed, relations,
  blog reads. Tests assert the SX envelope ({:ok true :data ...}).
- DELETE the blog JSON CRUD /posts (POST/PUT/DELETE) + bearer-based host/blog--protect:
  a pure old-contract REST mirror. Create/edit go through the HTML editor forms;
  programmatic writes speak SXTP. FOLLOW-UP: no browser delete route yet (was JSON-only,
  no UI) — add POST /:slug/delete + cascade edge cleanup when the metamodel UI needs it.
- INPUT: host/sx-body (sxtp.sx) parses a text/sx request body to a string-keyed dict
  (parse-safe + sxtp/-normalize). feed POST + relations attach/detach read it.
- UNIFIED field reader host/fields / host/field: text/sx body OR urlencoded form by
  content-type. The blog form handlers (new/edit/relate/unrelate) + login read through
  it — additive, urlencoded still works (no-engine / bootstrap fallback).

Conformance 290/290 (11 suites). Retires the strangler framing in the plan; adds the
'SX all the way out' wire table. The engine half (browser posts text/sx) follows.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

lib/host/tests/middleware.sx

@@ -71,7 +71,7 @@
   "principal threaded to handler"
   (contains?
     (dream-resp-body (host-mw-protected (host-mw-req "Bearer good")))
-    "\"data\":\"alice\"")
+    ":data \"alice\"")
   true)
 (host-mw-test
   "authed but not permitted -> 403"
@@ -81,7 +81,7 @@
   "403 envelope"
   (contains?
     (dream-resp-body (host-mw-protected-del (host-mw-req "Bearer good")))
-    "\"error\":\"forbidden\"")
+    ":error \"forbidden\"")
   true)
 
 ;; ── error trapping ─────────────────────────────────────────────────
@@ -94,7 +94,7 @@
   "500 envelope"
   (contains?
     (dream-resp-body ((host/wrap-errors host-mw-boom) (host-mw-req nil)))
-    "\"ok\":false")
+    ":ok false")
   true)
 
 (define