Make DB pool sizing configurable

**Area:** Backend
**Files:** `services/api/src/db.rs`, `services/api/src/config.rs`

**Problem:** DB pool min/max are hard-coded.

**Acceptance Criteria:**
- Pool sizes and timeouts are env-configurable.
- Safe defaults remain in place.
- Config docs updated.