[Backend][DOC] Define backend API conventions (error format, status codes, auth context)

[mehmetcangurbuz08]

Make decisions about:

Standard error response shape
Common HTTP status code usage (400/401/403/404/409/500)
Auth context contract (req.user.userId)
Basic route naming convention (kebab-case)