Consolidate audit-fixes branch: webhooks, integrations, and deploy hardening

Batch commit of the pending working tree on security/audit-fixes-2026-07.
Major areas:
- Outbound webhooks / Zapier: schema + signed delivery with retries, public
  v1 API (REST-hook subscribe/unsubscribe), settings UI, cron drain.
- Deploy hardening: email via SMTP2GO (Resend fully removed), verified DB TLS
  (DATABASE_SSL=require + DATABASE_CA), storage fails loud in production when
  Spaces is unconfigured instead of silently using ephemeral disk.
- Integrations & features (concurrent work): accounting (QuickBooks/Xero),
  e-signature (DocuSign/Dropbox Sign), PayPal, geocoding/maps, onboarding,
  expanded legal pages.
- DB migrations 0006–0009.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

components/dashboard/notifications-bell.tsx

@@ -7,10 +7,10 @@ import { formatDate } from "@/lib/utils"
 interface Notification {
   id: string
   type: string
-  title: string
-  body: string
+  subject: string
   read: boolean
-  created_at: string
+  sent_at: string
+  metadata?: { body?: string } & Record<string, unknown>
 }
 
 const typeIcon: Record<string, React.ElementType> = {
@@ -127,9 +127,11 @@ export function NotificationsBell() {
                         <Icon className="h-3.5 w-3.5" />
                       </div>
                       <div className="flex-1 min-w-0">
-                        <p className={`text-sm font-medium leading-tight ${n.read ? "text-white/60" : "text-white"}`}>{n.title}</p>
-                        <p className="text-xs text-white/35 mt-0.5 line-clamp-2">{n.body}</p>
-                        <p className="text-[10px] text-white/20 mt-1">{formatDate(n.created_at)}</p>
+                        <p className={`text-sm font-medium leading-tight ${n.read ? "text-white/60" : "text-white"}`}>{n.subject}</p>
+                        {typeof n.metadata?.body === "string" && n.metadata.body && (
+                          <p className="text-xs text-white/35 mt-0.5 line-clamp-2">{n.metadata.body}</p>
+                        )}
+                        <p className="text-[10px] text-white/20 mt-1">{formatDate(n.sent_at)}</p>
                       </div>
                       {!n.read && <div className="h-2 w-2 rounded-full bg-indigo-500 shrink-0 mt-1.5" />}
                     </div>