Consolidate audit-fixes branch: webhooks, integrations, and deploy hardening

Batch commit of the pending working tree on security/audit-fixes-2026-07.
Major areas:
- Outbound webhooks / Zapier: schema + signed delivery with retries, public
  v1 API (REST-hook subscribe/unsubscribe), settings UI, cron drain.
- Deploy hardening: email via SMTP2GO (Resend fully removed), verified DB TLS
  (DATABASE_SSL=require + DATABASE_CA), storage fails loud in production when
  Spaces is unconfigured instead of silently using ephemeral disk.
- Integrations & features (concurrent work): accounting (QuickBooks/Xero),
  e-signature (DocuSign/Dropbox Sign), PayPal, geocoding/maps, onboarding,
  expanded legal pages.
- DB migrations 0006–0009.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

app/globals.css

@@ -111,6 +111,86 @@ input[type="color"] {
   color-scheme: dark;
 }
 
+/* ── Toasts (Sonner) — on-brand dark glass ──────────────────────── */
+[data-sonner-toaster] {
+  font-family: var(--font-geist-sans), system-ui, sans-serif;
+}
+
+[data-sonner-toast] {
+  background: rgba(22, 22, 31, 0.82) !important;
+  border: 1px solid var(--border) !important;
+  border-radius: 14px !important;
+  padding: 15px 16px !important;
+  gap: 12px !important;
+  color: var(--foreground) !important;
+  backdrop-filter: blur(16px) saturate(160%);
+  -webkit-backdrop-filter: blur(16px) saturate(160%);
+  box-shadow:
+    0 18px 40px -14px rgba(0, 0, 0, 0.75),
+    0 0 0 1px rgba(255, 255, 255, 0.02) inset;
+}
+
+[data-sonner-toast] [data-title] {
+  font-size: 14px;
+  font-weight: 600;
+  letter-spacing: -0.01em;
+  color: var(--foreground);
+}
+
+[data-sonner-toast] [data-description] {
+  font-size: 12.5px;
+  line-height: 1.5;
+  color: var(--foreground-secondary);
+  margin-top: 2px;
+}
+
+[data-sonner-toast] [data-icon] {
+  width: 20px;
+  height: 20px;
+  margin: 0;
+}
+
+/* Faint per-type accent ring — keeps the card dark but signals intent */
+[data-sonner-toast][data-type="success"] { box-shadow: 0 18px 40px -14px rgba(0,0,0,.75), 0 0 0 1px rgba(16,185,129,.28) inset; }
+[data-sonner-toast][data-type="error"]   { box-shadow: 0 18px 40px -14px rgba(0,0,0,.75), 0 0 0 1px rgba(239,68,68,.30) inset; }
+[data-sonner-toast][data-type="warning"] { box-shadow: 0 18px 40px -14px rgba(0,0,0,.75), 0 0 0 1px rgba(245,158,11,.28) inset; }
+[data-sonner-toast][data-type="info"],
+[data-sonner-toast][data-type="loading"] { box-shadow: 0 18px 40px -14px rgba(0,0,0,.75), 0 0 0 1px rgba(99,102,241,.30) inset; }
+
+/* Action / cancel buttons inside a toast */
+[data-sonner-toast] [data-button] {
+  border-radius: 8px !important;
+  font-weight: 600 !important;
+  font-size: 12.5px !important;
+}
+[data-sonner-toast] [data-button]:not([data-cancel]) {
+  background: var(--brand) !important;
+  color: #fff !important;
+}
+[data-sonner-toast] [data-button]:not([data-cancel]):hover {
+  background: var(--brand-hover) !important;
+}
+[data-sonner-toast] [data-cancel] {
+  background: var(--surface-3) !important;
+  color: var(--foreground-secondary) !important;
+}
+
+/* Close button — appears on hover */
+[data-sonner-toast] [data-close-button] {
+  background: var(--surface-3) !important;
+  border: 1px solid var(--border) !important;
+  color: var(--foreground-secondary) !important;
+  border-radius: 8px !important;
+  width: 20px !important;
+  height: 20px !important;
+  transition: background 0.15s ease, color 0.15s ease, transform 0.15s ease;
+}
+[data-sonner-toast] [data-close-button]:hover {
+  background: #26263a !important;
+  color: var(--foreground) !important;
+  transform: scale(1.08);
+}
+
 /* Scrollbar */
 ::-webkit-scrollbar {
   width: 6px;