fix: re-revert the API decoupling (#41263)

* fix(api): decouple api from curriculum

This reverts commit 8f0e441644 and
introduces the implementations from #40703.

* fix(gitpod): add curriculum build to GitPod

This reverts commit 706d70f58d and
introduces implementations from #41234.

* docs: update DevOps manual for api change (#41259)

Co-authored-by: Oliver Eyton-Williams <ojeytonwilliams@gmail.com>

api-server/src/server/middleware.json

@@ -0,0 +1,65 @@
+{
+  "initial:before": {
+    "./middlewares/sentry-request-handler": {},
+    "loopback#favicon": {
+      "params": "$!../public/favicon.ico"
+    },
+    "loopback#static": {
+      "params": [
+        "$!../public",
+        {
+          "maxAge": "86400000"
+        }
+      ]
+    }
+  },
+  "initial": {
+    "compression": {},
+    "cors": {
+      "params": {
+        "origin": true,
+        "credentials": true,
+        "maxAge": 86400
+      }
+    }
+  },
+  "session": {
+    "./middlewares/sessions.js": {}
+  },
+  "auth:before": {
+    "express-flash": {},
+    "./middlewares/express-extensions": {},
+    "./middlewares/cookie-parser": {},
+    "./middlewares/request-authorization": {}
+  },
+  "parse": {
+    "body-parser#json": {},
+    "body-parser#urlencoded": {
+      "params": {
+        "extended": true
+      }
+    },
+    "method-override": {}
+  },
+  "routes:before": {
+    "helmet#xssFilter": {},
+    "helmet#noSniff": {},
+    "helmet#frameguard": {},
+    "./middlewares/csurf": {},
+    "./middlewares/constant-headers": {},
+    "./middlewares/csp": {},
+    "./middlewares/flash-cheaters": {},
+    "./middlewares/passport-login": {}
+  },
+  "files": {},
+  "final:after": {
+    "./middlewares/sentry-error-handler": {},
+    "./middlewares/error-handlers": {},
+    "strong-error-handler": {
+      "params": {
+        "debug": false,
+        "log": true
+      }
+    }
+  }
+}