Audit authz

Fixes ten security findings from the July billing audit: domain-layer functions lacked authorization checks, allowing any logged-in user to call credit/payment/plan APIs for any team; money paths and team access are now gated at the auth layer.