Consolidate audit-fixes branch: webhooks, integrations, and deploy hardening

Batch commit of the pending working tree on security/audit-fixes-2026-07.
Major areas:
- Outbound webhooks / Zapier: schema + signed delivery with retries, public
  v1 API (REST-hook subscribe/unsubscribe), settings UI, cron drain.
- Deploy hardening: email via SMTP2GO (Resend fully removed), verified DB TLS
  (DATABASE_SSL=require + DATABASE_CA), storage fails loud in production when
  Spaces is unconfigured instead of silently using ephemeral disk.
- Integrations & features (concurrent work): accounting (QuickBooks/Xero),
  e-signature (DocuSign/Dropbox Sign), PayPal, geocoding/maps, onboarding,
  expanded legal pages.
- DB migrations 0006–0009.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

components/maps/property-map.css

@@ -0,0 +1,36 @@
+/* Leaflet map styling for the dark app shell. */
+
+/* Our inline-SVG pin uses a divIcon; strip Leaflet's default white box. */
+.leaflet-div-icon.pmn-map-pin {
+  background: transparent;
+  border: 0;
+}
+
+/* OSM tiles are light — tone them to match the dark UI. Only the tile pane is
+   filtered, so markers, popups and controls keep their real colors. */
+.pmn-map-dark .leaflet-tile-pane {
+  filter: invert(1) hue-rotate(180deg) brightness(0.95) contrast(0.9);
+}
+
+/* Popups on the dark surface. */
+.pmn-map-dark .leaflet-popup-content-wrapper {
+  background: #16161f;
+  color: #fff;
+  border: 1px solid rgba(255, 255, 255, 0.1);
+  border-radius: 0.75rem;
+}
+.pmn-map-dark .leaflet-popup-tip {
+  background: #16161f;
+}
+.pmn-map-dark .leaflet-popup-content a {
+  color: #818cf8;
+}
+
+/* Attribution + controls readability on dark. */
+.pmn-map-dark .leaflet-control-attribution {
+  background: rgba(9, 9, 11, 0.7);
+  color: rgba(255, 255, 255, 0.4);
+}
+.pmn-map-dark .leaflet-control-attribution a {
+  color: rgba(255, 255, 255, 0.6);
+}