Gate Stripe readiness on real credentials, surface dead-lettered syncs as failed with retry, and add header-safe toast JSON encoding. Switch the test Keycloak realm references to `test` and document the OpenSpec change.
