feat(hono): compile-time wire-string check for params/query schemas

[christensena]

Params and query values reach the server as raw strings, so a bare
z.number()/z.boolean() type-checks but 400s on every request. route()
now rejects such schemas at compile time: a WireCheck type errors on any
params/query value whose input type admits neither a string nor an array
of strings.

z.coerce.number() is structurally identical to z.number() at the
type level, so the blessed idiom becomes z.coerce.number<number|string>()
— the input type declares the wire form, which is what the check (and the
client's argument types) can see. z.stringbool() covers booleans;
z.coerce.boolean() stays out (JS truthiness turns "false" into true).

Docs on route()/queryArray() and a README section cover the trap; the
example API demonstrates both idioms.

Closes #2

Co-Authored-By: Claude Fable 5 noreply@anthropic.com
Claude-Session: https://claude.ai/code/session_0197TQhAzcfxR5LQigesnfmv

[christensena]

Closing as superseded. The work described here — the compile-time wire-string check for params/query schemas — is what #19 carries.

Note that this PR's branch name, feat/codegen-route-wrapped, was reused for a new stack pushed today, so the diff shown above is no longer the change described in the body. The live PRs are:

• feat!: compile-time wire-string check; always-decoded params/query args #19 feat/wire-string-type-check → main — the wire-string check (this PR's content)
• refactor!: move route() into @zodapi/core so contracts carry no HTTP deps #21 refactor/core-owns-route → feat!: compile-time wire-string check; always-decoded params/query args #19 — moves route() into @zodapi/core
• feat(codegen): emit route() so generated contracts also mount on a server #22 feat/codegen-route-wrapped → refactor!: move route() into @zodapi/core so contracts carry no HTTP deps #21 — codegen emits route()

-- Claude