chore(signup): bump wisp/mist to latest, lock with manifest.toml

Two prior deploy failures came from transitive deps drifting on every
fresh build (gleam_httpc 4.1.1 calling result.then, then glisten 8.0.3
calling list.range). The root cause is no manifest.toml — every build
re-resolved deps from scratch and tripped on broken combinations within
the allowed ranges.

- Bump wisp 1.x → 2.x and mist 4.x → 6.x so the resolver picks
  modern, mutually compatible versions of the whole tree
  (stdlib 1.0.3, glisten 9.0.1, httpc 5.0.0).
- Commit manifest.toml so deps are pinned by checksum.
- Adapt to wisp 2.x: json_response now takes String, not StringTree.
- Drop unused gleam/http/response import.
- Add signup/build/ to .gitignore.

signup/gleam.toml

@@ -9,5 +9,5 @@ gleam_httpc = ">= 4.2.0 and < 6.0.0"
 gleam_json = ">= 3.0.0 and < 4.0.0"
 gleam_erlang = ">= 1.0.0 and < 2.0.0"
 envoy = ">= 1.0.0 and < 2.0.0"
-mist = ">= 4.0.0 and < 6.0.0"
-wisp = ">= 1.6.0 and < 2.0.0"
+mist = ">= 6.0.0 and < 7.0.0"
+wisp = ">= 2.0.0 and < 3.0.0"