chore: execute Sprint 38 technical debt resolution (Type Safety, Zod validation, Vitest, Mock LLM extracted)

fix(deploy): make Stripe keys optional at initialization

fix(security): audit fixes — Stripe webhook scope, fail-fast secrets, prisma singleton, worker auth, Zod validation, WA number env var

feat(payment): integrate stripe checkout, webhooks, and worker dispatch