Payment flow hardening: status gating, preview mode, cancel button, Stripe env fix, Venmo QR