Mock Stripe Customer Portal — wire `STRIPE_SECRET_KEY` + webhook routes before production.
Guardrails checklist