A non-UUID :documentId reached a uuid-typed equality query and surfaced
Postgres's "invalid input syntax for type uuid" as an opaque 500. Add a
router.param guard that rejects malformed ids early with a structured 400,
covering every :documentId route at once.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>