refactor: remove queries from api route

[FlynnOConnell]

• db queries now separate functions and called from controllers
• handler return types are now all Ok(StatusCode, Model) tuples
• queries made consistent, all using query! or query_as! macros
• custom error types made consistent so result/error matching returns the same type for both arms