Pass 2 module

Payments

Stripe Checkout sessions, webhook-confirmed payment status, refunds, and future deposit scaffolding will stay server-side.