Serve sidebar banners from one API

Sidebar banners now served from a single `get_banners` API with dismiss via `dismiss_banner`, replacing per-banner endpoints and socket wiring.