fix(build): stricter request body API removal with mode option

[yusukebe]

Request body APIs could be removed even when code outside a handler reads the body, e.g. a service function called from app.all() or middleware (#64). The optimized app then crashes at runtime on a POST request.

Changes, based on @usualoma's proposal in the issue:

• auto (default): remove the APIs only when every route method is strictly GET / HEAD / OPTIONS. A route or middleware registered with ALL keeps them
• --request-body-api-removal <mode>: auto | force | disable (replaces --no-request-body-api-removal)
• An invalid mode returns a JSON error (INVALID_OPTION)

With this, auto rarely fires for apps with middleware. That is intended: removal happens only when it is provably safe. If you know your app never reads request bodies, pass force.

Closes #64

The author should do the following, if applicable

• Add tests
• Run tests
• pnpm run format:fix && pnpm run lint:fix to format the code
• Add TSDoc/JSDoc to document the code