api/util: add Vars type for manual route variable injection in JSONAPIFunc, update all handler signatures