feat(payment): unified /payment hub with realtime PaymentHistory + Subscriptions

[TortoiseWolfe]

What

Consolidates the scattered payment pages into one tabbed hub at /payment and makes the surfaces live via Supabase Realtime. Replaces /payment/dashboard + /account/subscriptions (both deleted).

Hub (src/app/payment/)

page.tsx + PaymentHubContent.tsx + SearchParamsReader.tsx — ProtectedRoute + DaisyUI tabs (Overview / Subscriptions), ?tab= deep-linking, per-tab <h1> (Payments / Subscriptions), activeTab initialized synchronously from the URL so the right heading paints on first render. Absorbs the former dashboard (PaymentQueuePanel + PaymentHistory) and subscriptions (SubscriptionManager) content verbatim; gating (ProtectedRoute, feature flags, not-configured alert) intact. /account nav buttons now point at /payment[?tab=subscriptions].

Realtime (src/hooks/, reuses the useConnections debounced-channel pattern)

• usePaymentResultsRealtime + useSubscriptionsRealtime — subscribe to postgres_changes, debounce 1s, return 'connecting' | 'live' | 'error', fully inert when enabled=false (tests/stories). Unit-tested (mock channel, status callback, debounce, cleanup, disabled path).
• PaymentHistory + SubscriptionManager gain an optional realtime prop (default true): a stable refetch wired to the hook, a realtime-status connection badge, and a live transaction-count.

Migration (root-cause fix)

Adds payment_results + subscriptions to the supabase_realtime publication (idempotent-guarded, mirroring the messaging tables). Without this the channel subscribes but never receives events — I verified this live: the tables were missing from the publication; after adding them, the counter updated 2 → 3 on a service-role insert with no reload. Applied to prod via the Management API.

Tests

• Retargeted the 3 green tests to the hub (openSubscriptionsAs → /payment?tab=subscriptions; 02 route-render + 05 queue-panel gotos/headings). Per-tab h1 keeps their level: 1 heading anchors valid.
• Un-skipped 4 06-realtime tests (live transaction counter, payment-list live update, subscription status change, connection-status indicator) using new seedIsolatedPayment / openPaymentHubAs fixtures; guarded on getAdminClient().
• Regenerated docs/payment-e2e-skip-index.md (27 → 23 skips, reclassified).

Verification

• type-check ✅, lint ✅, validate:structure 110/110 ✅, 132 unit tests ✅
• Live Playwright-MCP realtime check: opened /payment, service-role inserted a payment → counter + list updated 2 → 3 with no reload; confirmed realtime-status reads "Live". (Surfaced + fixed the missing publication membership; also noted the PWA service worker caches the initial history fetch — the realtime in-memory refetch path is unaffected.)

🤖 Generated with Claude Code