fix(middleware): replace BaseHTTPMiddleware with pure ASGI middleware to fix streaming SSE 500 on POST /?token=...