Refactor payments
Before
Clean up the payment code.
After
Refactor packages/api/src/payments without behavior changes. Map entry points, side effects, and tests first. Put provider logic behind the existing PaymentGateway interface. Preserve Stripe webhook signature verification exactly. Run targeted tests and typecheck; summarize risks and files.
