fix: return clean errors and refund quota on AI provider failures

AI routes had no consistent error handling — a provider failure (e.g.
OpenRouter returning a degraded-model error) crashed the route as an
uncaught 500 and, worse, still charged the user's monthly aiCall
quota for a request that never succeeded.

Adds withAiQuota()/aiErrorResponse() (lib/ai/ai-error.ts) and applies
them across all 12 AI generation routes: charges the quota, runs the
AI call, refunds the credit and returns a clean user-facing message
if it throws. Frontend needs no changes — existing dialogs already
toast whatever `error` string comes back.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

apps/web/app/api/v1/ai/adapt/[id]/route.ts

@@ -3,7 +3,7 @@ import { z } from "zod";
 import { and, eq } from "@epicure/db";
 import { db, recipes, recipeIngredients, recipeSteps } from "@epicure/db";
 import { requireSession } from "@/lib/api-auth";
-import { checkAndIncrementTierLimit } from "@/lib/tiers";
+import { withAiQuota } from "@/lib/ai/ai-error";
 import { adaptRecipe } from "@/lib/ai/features/adapt-recipe";
 import { withUserKey } from "@/lib/ai/resolve-user-key";
 import { getUserPrivateBio } from "@/lib/ai/user-bio";
@@ -43,27 +43,30 @@ export async function POST(req: NextRequest, { params }: Params) {
     return NextResponse.json({ error: "Provide at least one constraint" }, { status: 400 });
   }
 
-  await checkAndIncrementTierLimit(userId, session!.user.tier as "free" | "pro", "aiCall");
-
   const [aiConfig, privateBio] = await Promise.all([
     withUserKey(userId, { provider: parsed.data.provider, model: parsed.data.model }),
     getUserPrivateBio(userId),
   ]);
-  const adapted = await adaptRecipe(
-    {
-      title: recipe.title,
-      description: recipe.description,
-      baseServings: recipe.baseServings,
-      ingredients: recipe.ingredients,
-      steps: recipe.steps,
-    },
-    {
-      excludeIngredients: parsed.data.excludeIngredients,
-      extraConstraints: parsed.data.extraConstraints,
-    },
-    { ...aiConfig, userContext: privateBio ?? undefined },
-    (session!.user as { locale?: string }).locale ?? "en"
+
+  const result = await withAiQuota(userId, session!.user.tier as "free" | "pro", () =>
+    adaptRecipe(
+      {
+        title: recipe.title,
+        description: recipe.description,
+        baseServings: recipe.baseServings,
+        ingredients: recipe.ingredients,
+        steps: recipe.steps,
+      },
+      {
+        excludeIngredients: parsed.data.excludeIngredients,
+        extraConstraints: parsed.data.extraConstraints,
+      },
+      { ...aiConfig, userContext: privateBio ?? undefined },
+      (session!.user as { locale?: string }).locale ?? "en"
+    )
   );
+  if (!result.ok) return result.response;
+  const adapted = result.data;
 
   const newId = crypto.randomUUID();
   const now = new Date();