Audit fixes 2026-10-03: seed keeps admin edits, plan cache, refresh limit, payment and tutor guards

- seed_content no longer undoes admin work: a SeedRecord ledger (content/seed_sync.py)
  stops deleted/renamed/re-worded content from being recreated and keeps admin-edited
  lesson text; new rows in the seed files still arrive (migration content.0010)
- plan list cache is invalidated on Plan save (receiver used a stale 'v1' key)
- token refresh per-IP cap 30/hour -> 600/hour (TOKEN_REFRESH_IP_RATE)
- a failed gateway result only changes a pending order (forged NOK no longer
  overwrites refunded/canceled)
- tutor gets the correct answer only after the student has answered
- support reply notification moved to a TicketMessage post_save signal
- global daily cap on paid AI questions (AI_GLOBAL_DAILY_MAX, default 3000)
- Bazaar verify uses only the order's SKU; bazaar orders require a SKU
- /api/health warns on the committed signing key; deploy.sh saves local commits;
  400 for bad ?unit= / ?period=; account delete keeps the referrer's Conversion
- earlier today: no stub answers outside DEBUG, ?grade= removed, logged fallbacks

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

rag/tests_tutor_quality.py

@@ -298,6 +298,17 @@ class QuestionFocusTests(TestCase):
         self.assertIn('-8 (غلط)', focus)
         self.assertIn('جوابِ درست: 1/8', focus)
 
+    def test_the_answer_is_not_given_before_the_student_answers(self):
+        with patch('rag.services.retrieval.retrieve_context', return_value=([], {})), \
+             patch('rag.services.generation.generate_answer',
+                   return_value=('جواب', [], {})) as generate:
+            self.client.post('/api/ai/ask', {
+                'userQuestion': 'جوابش چیه؟', 'questionId': str(self.question.id),
+            }, format='json')
+        focus = generate.call_args.kwargs['focus']
+        self.assertIn('۲ به توان منفی ۳؟', focus)
+        self.assertNotIn('جوابِ درست:', focus)
+
     def test_an_overlong_question_is_refused_before_any_paid_call(self):
         with patch('rag.services.generation.generate_answer') as generate:
             response = self.client.post('/api/ai/ask', {'userQuestion': 'x' * 2001}, format='json')