Consolidate audit-fixes branch: webhooks, integrations, and deploy hardening

Batch commit of the pending working tree on security/audit-fixes-2026-07.
Major areas:
- Outbound webhooks / Zapier: schema + signed delivery with retries, public
  v1 API (REST-hook subscribe/unsubscribe), settings UI, cron drain.
- Deploy hardening: email via SMTP2GO (Resend fully removed), verified DB TLS
  (DATABASE_SSL=require + DATABASE_CA), storage fails loud in production when
  Spaces is unconfigured instead of silently using ephemeral disk.
- Integrations & features (concurrent work): accounting (QuickBooks/Xero),
  e-signature (DocuSign/Dropbox Sign), PayPal, geocoding/maps, onboarding,
  expanded legal pages.
- DB migrations 0006–0009.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

components/forms/unit-form.tsx

@@ -4,6 +4,7 @@ import { useState } from "react"
 import { useRouter } from "next/navigation"
 import { toast } from "sonner"
 import { Select } from "@/components/ui/select"
+import type { Unit } from "@/types"
 
 const statusOptions = [
   { value: "vacant",      label: "Vacant" },
@@ -14,13 +15,15 @@ const statusOptions = [
 
 interface UnitFormProps {
   propertyId: string
+  unit?: Unit
   onSuccess?: () => void
 }
 
-export function UnitForm({ propertyId, onSuccess }: UnitFormProps) {
+export function UnitForm({ propertyId, unit, onSuccess }: UnitFormProps) {
   const router = useRouter()
   const [loading, setLoading] = useState(false)
-  const [status, setStatus] = useState("vacant")
+  const [status, setStatus] = useState(unit?.status ?? "vacant")
+  const isEditing = Boolean(unit)
 
   async function handleSubmit(e: React.FormEvent<HTMLFormElement>) {
     e.preventDefault()
@@ -38,21 +41,24 @@ export function UnitForm({ propertyId, onSuccess }: UnitFormProps) {
       notes:        formData.get("notes") || undefined,
     }
 
-    const res = await fetch("/api/units", {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify(body),
-    })
+    const res = await fetch(
+      isEditing ? `/api/units/${unit!.id}` : "/api/units",
+      {
+        method: isEditing ? "PATCH" : "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify(body),
+      }
+    )
 
     setLoading(false)
 
     if (!res.ok) {
-      const data = await res.json()
-      toast.error(data?.error ?? "Failed to add unit")
+      const data = await res.json().catch(() => null)
+      toast.error(data?.error ?? (isEditing ? "Failed to update unit" : "Failed to add unit"))
       return
     }
 
-    toast.success("Unit added")
+    toast.success(isEditing ? "Unit updated" : "Unit added")
     if (onSuccess) {
       onSuccess()
     } else {
@@ -69,26 +75,26 @@ export function UnitForm({ propertyId, onSuccess }: UnitFormProps) {
       <div className="grid grid-cols-2 gap-4">
         <div>
           <label className={labelClass}>Unit Number *</label>
-          <input name="unit_number" required placeholder="e.g. 1A, 101" className={inputClass} />
+          <input name="unit_number" required placeholder="e.g. 1A, 101" defaultValue={unit?.unit_number ?? ""} className={inputClass} />
         </div>
         <div>
           <label className={labelClass}>Monthly Rent ($) *</label>
-          <input name="rent_amount" type="number" required min={0} step={0.01} placeholder="1500" className={inputClass} />
+          <input name="rent_amount" type="number" required min={0} step={0.01} placeholder="1500" defaultValue={unit?.rent_amount ?? ""} className={inputClass} />
         </div>
       </div>
 
       <div className="grid grid-cols-3 gap-4">
         <div>
           <label className={labelClass}>Bedrooms</label>
-          <input name="bedrooms" type="number" min={0} defaultValue={1} className={inputClass} />
+          <input name="bedrooms" type="number" min={0} defaultValue={unit?.bedrooms ?? 1} className={inputClass} />
         </div>
         <div>
           <label className={labelClass}>Bathrooms</label>
-          <input name="bathrooms" type="number" min={0} step={0.5} defaultValue={1} className={inputClass} />
+          <input name="bathrooms" type="number" min={0} step={0.5} defaultValue={unit?.bathrooms ?? 1} className={inputClass} />
         </div>
         <div>
           <label className={labelClass}>Sq Ft</label>
-          <input name="sq_ft" type="number" min={0} placeholder="Optional" className={inputClass} />
+          <input name="sq_ft" type="number" min={0} placeholder="Optional" defaultValue={unit?.sq_ft ?? ""} className={inputClass} />
         </div>
       </div>
 
@@ -97,13 +103,13 @@ export function UnitForm({ propertyId, onSuccess }: UnitFormProps) {
         <Select
           options={statusOptions}
           value={status}
-          onChange={setStatus}
+          onChange={(v) => setStatus(v as "vacant" | "occupied" | "maintenance" | "unavailable")}
         />
       </div>
 
       <div>
         <label className={labelClass}>Notes</label>
-        <textarea name="notes" rows={3} placeholder="Optional notes..." className={`${inputClass} resize-none`} />
+        <textarea name="notes" rows={3} placeholder="Optional notes..." defaultValue={unit?.notes ?? ""} className={`${inputClass} resize-none`} />
       </div>
 
       <div className="flex gap-3 pt-2">
@@ -119,7 +125,7 @@ export function UnitForm({ propertyId, onSuccess }: UnitFormProps) {
           disabled={loading}
           className="flex-1 rounded-lg bg-indigo-600 py-2.5 text-sm font-medium text-white hover:bg-indigo-500 transition disabled:opacity-50"
         >
-          {loading ? "Adding…" : "Add Unit"}
+          {loading ? (isEditing ? "Saving…" : "Adding…") : isEditing ? "Save Changes" : "Add Unit"}
         </button>
       </div>
     </form>