GET /api/v1/admin/merch

Admin merch queue (q + status) with refund/credit/chargeback flags · Admin

Machine-readable contract: GET /api/v1/openapi. Missing Stripe, APNs, FCM, or OAuth keys return 501 or log-only — never a fake success.