Return 400 instead of 500 for malformed legacy ids

GET /legacy-id/{type}/{id} no longer fails with an unhandled 500 when the id contains characters outside the hashid alphabet (for example d2rh6yyk_Duplicated). These requests now return a 400 Bad Request, consistent with other unparseable legacy ids.