fix: A21 phase 1 — 352 routes async sans await → threadpool (v7.8.0)

- Conversion `async def` → `def` de TOUTES les routes dont le corps ne contient
  ni `await`, ni `async with`, ni `async for`, ni `asyncio` (scan automatique
  corps par corps sur app/ : 352 converties, 0 dangereuses, vérifié
  `asyncio`/`run_coroutine`/`.result()` absents). FastAPI exécute ces handlers
  dans son threadpool → tout leur SQLite (`get_conn()` + `conn.execute`) quitte
  l'event loop, sans changer une ligne de logique.
- Répartition : api_v2 60, dashboard 40, collections 25, board 23,
  workspace 19, wiki 17, permissions 14, api 14, main.py 6, + 35 fichiers.
- Les 4 routers prioritaires de l'audit sont couverts par ce lot :
  api_v2 60 + dashboard 40 + collections 25 + board 23 = 148 conversions
  (le reste de leurs routes attend la phase 2 : elles ont de vrais `await`).
- Reste (phase 2) : les 311 routes avec de vrais `await` → enrouler les blocs
  DB dans `await anyio.to_thread.run_sync(...)` ; pas de wrapper partagé livré
  (rien ne l'appellerait — YAGNI jusqu'au premier usage).

suite **1037/1037** (233 s) · `ruff check app tests` OK · docs à jour

app/routers/scim.py

@@ -60,7 +60,7 @@ def _scim_user(row) -> dict:
 # ── SCIM resources ─────────────────────────────────────────────────────────
 
 @router.get("/scim/v2/Users")
-async def scim_list(request: Request):
+def scim_list(request: Request):
     _scim_guard(request)
     with get_conn() as conn:
         rows = conn.execute("SELECT * FROM users ORDER BY id LIMIT 100").fetchall()
@@ -99,7 +99,7 @@ async def scim_create(request: Request):
 
 
 @router.get("/scim/v2/Users/{user_id}")
-async def scim_get(user_id: str, request: Request):
+def scim_get(user_id: str, request: Request):
     _scim_guard(request)
     with get_conn() as conn:
         row = conn.execute("SELECT * FROM users WHERE id=?", (user_id,)).fetchone()
@@ -164,7 +164,7 @@ async def scim_patch(user_id: str, request: Request):
 
 
 @router.delete("/scim/v2/Users/{user_id}")
-async def scim_delete(user_id: str, request: Request):
+def scim_delete(user_id: str, request: Request):
     _scim_guard(request)
     with get_conn() as conn:
         row = conn.execute("SELECT id FROM users WHERE id=?", (user_id,)).fetchone()
@@ -200,7 +200,7 @@ async def create_scim_token(request: Request):
 
 
 @router.get("/api/v2/scim/tokens")
-async def list_scim_tokens(request: Request):
+def list_scim_tokens(request: Request):
     _admin_session(request)
     with get_conn() as conn:
         rows = conn.execute("SELECT id, name, created_by, revoked, created_at"
@@ -209,7 +209,7 @@ async def list_scim_tokens(request: Request):
 
 
 @router.delete("/api/v2/scim/tokens/{token_id}")
-async def revoke_scim_token(token_id: int, request: Request):
+def revoke_scim_token(token_id: int, request: Request):
     admin = _admin_session(request)
     with get_conn() as conn:
         conn.execute("UPDATE scim_tokens SET revoked=1 WHERE id=?", (token_id,))
@@ -221,7 +221,7 @@ async def revoke_scim_token(token_id: int, request: Request):
 # ── domain claims ──────────────────────────────────────────────────────────
 
 @router.get("/api/v2/domain-claims")
-async def list_domains(request: Request):
+def list_domains(request: Request):
     _admin_session(request)
     with get_conn() as conn:
         rows = conn.execute("SELECT * FROM domain_claims ORDER BY domain").fetchall()
@@ -288,7 +288,7 @@ async def verify_domain(domain_id: int, request: Request):
 
 
 @router.delete("/api/v2/domain-claims/{domain_id}")
-async def delete_domain(domain_id: int, request: Request):
+def delete_domain(domain_id: int, request: Request):
     admin = _admin_session(request)
     with get_conn() as conn:
         conn.execute("DELETE FROM domain_claims WHERE id=?", (domain_id,))