refactor: split app controller federation helpers

Move federated orchestration and app-instance normalization out of app_controllers while keeping controller behavior stable and preserving the normalized federated app handling validated in smoke and controller tests.