Validate destination/moon parent-child relationship in compute_route and API

[yuuka-dev]

From Copilot review on #6:

• compute_route() doesn't validate that destination orbits the same parent as home, or that moon orbits destination
• /calc/route API endpoint allows invalid moon/destination combinations
• Should return 422 for invalid combinations