Audit fixes 2026-10-03: seed keeps admin edits, plan cache, refresh limit, payment and tutor guards

- seed_content no longer undoes admin work: a SeedRecord ledger (content/seed_sync.py)
  stops deleted/renamed/re-worded content from being recreated and keeps admin-edited
  lesson text; new rows in the seed files still arrive (migration content.0010)
- plan list cache is invalidated on Plan save (receiver used a stale 'v1' key)
- token refresh per-IP cap 30/hour -> 600/hour (TOKEN_REFRESH_IP_RATE)
- a failed gateway result only changes a pending order (forged NOK no longer
  overwrites refunded/canceled)
- tutor gets the correct answer only after the student has answered
- support reply notification moved to a TicketMessage post_save signal
- global daily cap on paid AI questions (AI_GLOBAL_DAILY_MAX, default 3000)
- Bazaar verify uses only the order's SKU; bazaar orders require a SKU
- /api/health warns on the committed signing key; deploy.sh saves local commits;
  400 for bad ?unit= / ?period=; account delete keeps the referrer's Conversion
- earlier today: no stub answers outside DEBUG, ?grade= removed, logged fallbacks

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

payment/views.py

@@ -100,6 +100,9 @@ class CreateOrderView(APIView):
         serializer.is_valid(raise_exception=True)
         v = serializer.validated_data
 
+        if v.get('provider') == 'bazaar' and not v.get('bazaarProductSku'):
+            raise ValidationError({'bazaarProductSku': 'سفارشِ بازار بدونِ SKU ساخته نمی‌شود.'})
+
         plan = None
         if v.get('planId'):
             from subscription.models import Plan
@@ -325,8 +328,12 @@ class BazaarVerifyPurchaseView(APIView):
             Order, pk=v['orderId'], user_id=request.user.id, provider='bazaar',
         )
 
+        # SKU فقط از خودِ سفارش. تا ۲۰۲۶-۱۰-۰۳ اگر سفارش SKU نداشت، SKUِ فرستاده‌ی کلاینت سنجیده
+        # می‌شد؛ یعنی توکنِ خریدِ ارزان‌ترین محصول سفارشِ گران‌ترین پلن را «paid» می‌کرد.
+        if not order_lookup.bazaar_product_sku:
+            raise ValidationError({'orderId': 'این سفارش محصولِ بازار ندارد.'})
         result = bazaar.verify_purchase(
-            product_sku=order_lookup.bazaar_product_sku or v['productSku'],
+            product_sku=order_lookup.bazaar_product_sku,
             purchase_token=v['purchaseToken'],
         )