feat: complete release readiness work

- consolidate API ownership and remove dead vendor code

- add Stripe billing, learning paths, and public CV hardening

- add migration, recovery, security, audit, and browser gates

JobTrackerApi.Tests/AccountPlansTests.cs

@@ -5,6 +5,17 @@ namespace JobTrackerApi.Tests;
 
 public sealed class AccountPlansTests
 {
+    [Theory]
+    [InlineData("active", true)]
+    [InlineData("trialing", true)]
+    [InlineData("past_due", false)]
+    [InlineData("canceled", false)]
+    [InlineData(null, false)]
+    public void Premium_subscription_status_requires_current_access(string? status, bool expected)
+    {
+        Assert.Equal(expected, AccountPlans.IsPremiumSubscriptionStatus(status));
+    }
+
     [Fact]
     public void Premium_role_receives_higher_cost_capabilities()
     {