fix: add asyncHandler utility and wrap all bare-await routes

[OAKVISUALZ]

Closes #124

Problem:
Express 4 does not automatically catch rejected promises from async route handlers. Routes with bare �wait db.query(...) calls and no try/catch cause the client to hang or receive an empty response when the DB is unavailable -- the error is swallowed silently.

Fix:

1. backend/src/utils/asyncHandler.js (NEW) Thin wrapper: (fn) => (req, res, next) => Promise.resolve(fn(...)).catch(next) Forwards any rejection to Express error pipeline.

2. backend/src/middleware/errorHandler.js (UNCHANGED -- already correct) Existing errorHandler already:

   • Has 4-argument signature (err, req, res, next)
   • Logs full stack trace via logger.error()
   • Hides error details from clients in production (shows 'Internal server error')
   • Returns JSON 500 with structured error body No changes needed here.

3. backend/src/routes/users.js Wraps: GET /me, POST /me/kyc/start, GET /me/campaigns, GET /me/stats, GET /me/contributions

4. backend/src/routes/stellarTransactions.js Wraps: GET /, GET /:id Also wraps assertCampaignReportingAccess helper called inside those routes.

5. backend/src/routes/contributions.js Wraps: GET /mine, GET /campaign/:campaignId, GET /, GET /finalization/:txHash, GET /quote, POST /prepare, POST /submit-signed, POST / Routes with existing try/catch keep their explicit error responses but are also covered by asyncHandler for any awaits outside the try block.

6. backend/src/routes/campaigns.js Wraps: requireCampaignMember middleware factory, GET /, GET /mine, GET /:id/milestones, POST /:id/milestones, GET /:id, GET /:id/embed, GET /:id/backers, GET /:id/stream, GET /:id/balance, POST /cron/fail-expired, POST /cron/reminders, POST /:id/trigger-refunds, POST /, PATCH /:id, GET /:id/updates, POST /:id/updates, POST /:id/members, GET /:id/members, PATCH /:id/members/:userId, DELETE /:id/members/:userId, POST /:id/members/accept

7. backend/src/utils/asyncHandler.test.js (NEW) 4 unit tests covering: arg pass-through, thrown errors, rejected promises, and verifying next() is not called on success.

Acceptance criteria:

• Any DB failure returns 500 JSON instead of a hung connection
• Error middleware logs the full stack trace (existing errorHandler)
• Sensitive details hidden in production (existing errorHandler)
• All route files use asyncHandler or explicit try/catch
• 78 tests total, 70 pass (2 pre-existing DB-dependent failures on main)

[drips-wave]

@OAKVISUALZ Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits