refactor: move newsletter to plain HTTP endpoint outside oRPC

oRPC's RPCHandler uses its own wire protocol, so plain POST requests
from the website form were rejected with 422. Move the newsletter
subscribe handler to a standalone HTTP endpoint handled directly in
server.ts before the oRPC handler.

Includes CORS preflight support, rate limiting, input validation,
and 15 tests.

Author: sionzee