[mike-programs]

Closes: #1717
Closes: #1718
Closes: #1719
Closes: #1721

• Email worker restart counter never resets, so the worker is abandoned after 5 crashes in the process lifetime #1717: email worker restart counter resets after 5 min of healthy running.
• Shutdown drains background workers inside the signal future, before the HTTP server stops accepting requests #1718: HTTP server drains first; email/blockchain workers are drained after axum::serve returns.
• build_cors_layer silently drops origins, methods and headers that fail to parse #1719: warn on every unparsable CORS origin/method/header; wildcard origin disables credentials.
• Body-size middleware reads the env var on every request, runs up to three times, and buffers whole bodies #1721: body limit cached in a OnceLock, redundant per-router size layers removed (global one kept), body read has a 30s timeout.

Validation: not compiled locally — cargo check fails on a pre-existing testcontainers feature error in services/api/Cargo.toml. No tests added.

[drips-wave]

@mike-programs Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits