feat: add sole-admin moderation and protected payments

[SourceSenseiTheRealOne]

Summary

• restrict listing approval and payment operations to the exact verified administrator while retaining durable Go roles
• add Stripe Checkout/Connect payments with server-owned amounts, signed idempotent webhooks, payouts, refunds, disputes, tax and invoice configuration
• add localized payment, payout, legal and administration surfaces plus the compact discovery filter control

Verification

• Go full tests, focused race tests, vet and build
• real local PostgreSQL checkout/webhook/admin-list integration test
• frontend verify: 43 files / 110 tests, lint, typecheck, production build, audit
• authenticated local runtime: listing queue resolved and payment admin BFF returned the durable empty queue

Deployment

• source promotion only; no Heroku deployment
• production payment activation remains blocked until exposed credentials are rotated and provider-side activation gates are complete

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Team

Run ID: 5a602dd8-88cb-4576-8240-8da34f00a566

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}