fix: return clean errors and refund quota on AI provider failures

AI routes had no consistent error handling — a provider failure (e.g.
OpenRouter returning a degraded-model error) crashed the route as an
uncaught 500 and, worse, still charged the user's monthly aiCall
quota for a request that never succeeded.

Adds withAiQuota()/aiErrorResponse() (lib/ai/ai-error.ts) and applies
them across all 12 AI generation routes: charges the quota, runs the
AI call, refunds the credit and returns a clean user-facing message
if it throws. Frontend needs no changes — existing dialogs already
toast whatever `error` string comes back.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

apps/web/app/api/v1/ai/import-url/route.ts

@@ -2,7 +2,7 @@ import { NextRequest, NextResponse } from "next/server";
 import { z } from "zod";
 import { requireSession } from "@/lib/api-auth";
 import { applyRateLimit } from "@/lib/rate-limit";
-import { checkAndIncrementTierLimit } from "@/lib/tiers";
+import { withAiQuota } from "@/lib/ai/ai-error";
 import { importFromUrl } from "@/lib/ai/features/import-url";
 import { validateWebhookUrl } from "@/lib/validate-webhook-url";
 
@@ -30,12 +30,13 @@ export async function POST(req: NextRequest) {
   const limited = await applyRateLimit(`rl:ai:${session!.user.id}`, 10, 60);
   if (limited) return limited;
 
-  await checkAndIncrementTierLimit(session!.user.id, session!.user.tier as "free" | "pro", "aiCall");
+  const result = await withAiQuota(session!.user.id, session!.user.tier as "free" | "pro", () =>
+    importFromUrl(parsed.data.url, {
+      provider: parsed.data.provider,
+      model: parsed.data.model,
+    })
+  );
+  if (!result.ok) return result.response;
 
-  const recipe = await importFromUrl(parsed.data.url, {
-    provider: parsed.data.provider,
-    model: parsed.data.model,
-  });
-
-  return NextResponse.json(recipe);
+  return NextResponse.json(result.data);
 }