Changed all services to use one instantiation pattern

[ErisDS]

Summary

• Gives every runtime service under core/server/services the same public shape: an explicit init() entry point and a service facade.
• Makes boot responsible for construction and updates consumers to use the initialized facade, while retaining lazy failure messages for accidental use before initialization.
• Adds a contract test that classifies every top-level directory and prevents actual service roots from drifting back to incompatible export shapes.

This PR is based on #34 so the complete pattern and this repository-wide application can be reviewed separately.

What counts as a service here?

The conversion found 56 runtime service roots and 11 directories that currently live under services/ but do not represent independently initialized runtime services:

• subsystems or modules: auth, api-version-compatibility, public-config
• actions or jobs: invitations, update-check
• infrastructure or factories: mail
• support directories: email-rendering, files, integrations, lib, verification

Those directories are classified by the contract test but are not forced into a lifecycle they do not have. Moving them to their eventual domain or Kernel locations is intentionally separate from this mechanical standardisation.

Implementation notes

• Service roots expose {init, service}. TypeScript roots use equivalent named exports.
• init() owns construction and is safe to call more than once. Services whose state is intentionally refreshed on each Ghost boot, such as settings, permissions, themes, and route settings, retain that behaviour.
• Composite services keep their existing nested API where changing it would be a separate design refactor.
• Existing wrappers that only implemented lazy construction were folded into their root where possible. Wrappers that still provide meaningful composition remain internal implementation details.

Follow-ups

• Add a generator for the standard service skeleton and its boot registration.
• Move the 11 classified non-service directories as the repo-structure work establishes their final homes.
• Consider a small declarative boot loader once service dependencies and initialization phases are explicit. The shared lazySingleton facade is deliberately smaller than that future abstraction.

Testing

• pnpm lint from ghost/core
• pnpm exec vitest run test/unit/server/services/service-roots.test.js
• Full unit run: 606 files, 7,861 tests
• Full E2E run: 607 suites, 2,045 passed, 1 skipped
• GitHub CI, including MySQL and SQLite acceptance, legacy suites, Ghost-CLI archive install, and all E2E shards

[github-actions]

E2E Tests Failed

To view the Playwright test report locally, run:

REPORT_DIR=$(mktemp -d) && gh run download 32101607621 -n playwright-report -D "$REPORT_DIR" && npx playwright show-report "$REPORT_DIR"