Prepare isolated Stripe sandbox dues release and verification

[daliu]

The dues runtime is merged but has no safe hosted release path. This change packages only its isolated entrypoint, checks staging identity, narrow runtime access and pinned test-secret metadata, verifies native Function archives, and enables the dues page only through the explicit backend-first staging Hosting mode. Ordinary Hosting clears an inherited dues flag. Restricted sandbox keys are supported; live payments remain disabled.

Existing profile/community release paths recognize and preserve only the exact isolated dues Functions. Membership-card copy follows the connected flag. No provider, IAM, secret, webhook or cloud resource has been changed. Club Stripe sign-in is pending; #742 remains open for provider setup and hosted acceptance.

Officer impact: a reviewed specialist release path is prepared; officers still have no usable dues review link and handle no credentials, terminal or records.
Officer documentation: docs/officers/TEST_DUES.md, SYSTEM_MAPS.md, README.md; OFFICER_START_HERE.md; docs/TEST_DUES_RELEASE.md and engineering/root checkpoints.
Deployment evidence: none for dues. Read-only staging inspection preserved community v7 and profile v2/v1; Secret Manager is disabled. Production and real payments untouched.

Validation: 88 release/profile/Hosting contract tests, 30 Stripe adapter tests and 30 membership-screen tests passed; Functions lint and frontend lint baseline passed. Full exact-head CI and genuine Opus5.5 medium/max approval required before merge/deployment. Native sandbox/signature/Checkout/reconciliation/automatic membership/free-event/phone-desktop proof and exact-owned cleanup remain required under #742.

Refs #742. No issue closure or live-money launch claim.

[netlify]

✅ Deploy Preview for luminous-fox-7c393f ready!

Name	Link
🔨 Latest commit	6cf7cbb
🔍 Latest deploy log	https://app.netlify.com/projects/luminous-fox-7c393f/deploys/6ad32971c497a8bcf9352acd
😎 Deploy Preview	https://deploy-preview-744--luminous-fox-7c393f.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.
🤖 Make changes	Run an agent on this branch

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[daliu]

Delegated code approval under Dave's explicit rule: genuine Opus5.5 medium APPROVE binds final head 6cf7cbb281f7713e4ce05c84829f6dd2a24c6a20 against main 5d8f8886c0af916442ea01e007f01c32c9d0acc8. Full-source review approved 09af698ef907438299041c696e64fc372a7a92f6; a fresh final-delta review approved the complete final head. Both completed successfully using only claude-opus-5-5, zero permission denials or fallback. Root independently bound actual Git head/tree and all23file hashes. Both nonblocking notes were addressed: explicit project-wide Secret Manager accessor/admin grants now fail, and inactive-target recovery requires a separately reviewed repair without automatic deletion. Existing owner/platform/custom/organization IAM is not claimed comprehensively audited.

Exact final-head CI39015312687: all six expected jobs, every step completed/successful; no skipped step borrowed as proof. Local88release/profile/Hosting,30adapter and30screen tests plus lint passed. Redacted native review/result/hash/CI receipts retained in the task-owned October17artifact directory.

Dave authorized merge/build/staging deployment after this approval rule. Existing administrator merge capability may satisfy GitHub's separate REVIEW_REQUIRED state. No GitHub reviewer approval is fabricated and no branch/environment protection is changed.

Officer impact: specialist release preparation only; no usable dues review link yet.
Officer documentation: affected officer guides/maps, OFFICER_START_HERE.md and docs/TEST_DUES_RELEASE.md updated.
Deployment evidence: none for dues. Existing staging native Functions/website unchanged; club Stripe sign-in awaits private owner password/MFA. No secrets/IAM/webhook/provider mutation, real payment or production release. #742 remains OPEN for native hosted acceptance.