GET /servers lists registered servers; GET /servers/:id/clients returns that server's client list (filtered in-handler, store.GetClients isn't server-scoped yet - that's a later step). Old routes untouched. Also factors the repeated serverID validation guard in jsondb.go's new server-scoped methods into one validateServerID() helper, per a code simplification review.