Secure checkout

Customer details, selected size, selected color, stock, shipping and prices are validated server-side before creating a Stripe Checkout session.

WhatsApp ordering is environment-driven through WHATSAPP_ORDER_PHONE; no phone number is hardcoded.