mrhid6andClaude Opus 5
55526263a0
Closes the rest of what spec 4's screens need. Account search now also matches a Paddle customer ID and resolves an instance UUID to its owning account -- a support email often contains a UUID and nothing else, and the old search returned nothing for it. GET /api/staff/instances/:id is the "why did this stop working" screen's data: the instance, its account, its whole licence history newest first, and whether the control plane currently holds the blob we think it holds. Injection state is reported only for cloud, because for self-hosted the customer holds the blob and there is nothing for us to have written. Account detail gains subscriptions, customer users and its own audit trail. No secret leaves: the password hash and both verify-token fields are json:"-". The control-plane write surface is unchanged -- still exactly one UpdateOne of three licence fields in inject.go, with reads everywhere else. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>