Serve paid production job feeds to local companions

[duckdegen]

Purpose

Connect the local Recruiters.rip companion to hosted production job data using existing account authentication and live Stripe billing. No inference runtime or private candidate-profile/CV/score storage is deployed.

Changes

• Add owned Ed25519 device pairing, replay-safe signed feed reads and before/after paid-membership authorization.
• Reuse production job projections and full original adverts, newest-first fourteen-day catalogue, compact organization/project/funding/location context.
• Reuse the existing live Stripe merchant and verified webhook for USD 9.99 monthly membership; separate paid entitlement from recoverable billing agreements to prevent duplicate subscriptions.
• Add only device/nonces/subscription/payment-event metadata tables via idempotent SQL.
• Return guard-verified Privy DID for account-bound frontend sessions.

Release prerequisites

• scripts/sql/companion.sql applied by the production schema owner; application grants verified.
• Existing live monthly price configured through STRIPE_CANDIDATE_PRICE_ID; existing webhook event coverage extended without rotating secrets.
• Deploy middleware before the companion frontend so verified identity binding exists.
• User completes the live checkout; no fixture membership or operator-granted entitlement.

Verification

Local release build, focused authorization/billing tests and full CI checks are recorded on this PR. Security review addressed duplicate-billing and terminal-history reconciliation defects. Hosted account/payment/feed smoke follows deployment; no claim of a completed payment or live feed authorization before that smoke.

[sonarqubecloud]

Quality Gate passed

Issues
15 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
2.2% Duplication on New Code

See analysis details on SonarQube Cloud