Audit fixes 2026-10-03: seed keeps admin edits, plan cache, refresh limit, payment and tutor guards

- seed_content no longer undoes admin work: a SeedRecord ledger (content/seed_sync.py)
  stops deleted/renamed/re-worded content from being recreated and keeps admin-edited
  lesson text; new rows in the seed files still arrive (migration content.0010)
- plan list cache is invalidated on Plan save (receiver used a stale 'v1' key)
- token refresh per-IP cap 30/hour -> 600/hour (TOKEN_REFRESH_IP_RATE)
- a failed gateway result only changes a pending order (forged NOK no longer
  overwrites refunded/canceled)
- tutor gets the correct answer only after the student has answered
- support reply notification moved to a TicketMessage post_save signal
- global daily cap on paid AI questions (AI_GLOBAL_DAILY_MAX, default 3000)
- Bazaar verify uses only the order's SKU; bazaar orders require a SKU
- /api/health warns on the committed signing key; deploy.sh saves local commits;
  400 for bad ?unit= / ?period=; account delete keeps the referrer's Conversion
- earlier today: no stub answers outside DEBUG, ?grade= removed, logged fallbacks

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

support/tests.py

@@ -392,3 +392,33 @@ class TicketListTests(TestCase):
                 '/api/support/tickets', {'subject': 'س', 'category': 'other'}, format='json', **self.auth,
             )
         self.assertEqual(response.status_code, 200)
+
+
+class TicketReplyNotificationTests(TestCase):
+    """پاسخی که پشتیبان از صفحه‌ی خودِ تیکت (inline) می‌دهد هم اعلان می‌سازد (تا ۲۰۲۶-۱۰-۰۳ نمی‌ساخت)."""
+
+    def test_inline_reply_on_the_ticket_page_notifies_the_user(self):
+        from django.contrib.auth.models import User as Staff
+        from django.test import Client
+
+        from notifications.models import Notification
+
+        staff = Staff.objects.create_superuser('support-staff', 's@example.com', 'pw')
+        ticket = Ticket.objects.create(user_id=77, subject='s', category='c')
+        client = Client()
+        client.force_login(staff)
+        client.post(f'/admin/support/ticket/{ticket.id}/change/', {
+            'user_id': 77, 'subject': 's', 'category': 'c', 'status': 'open', 'priority': 'normal',
+            'messages-TOTAL_FORMS': '1', 'messages-INITIAL_FORMS': '0',
+            'messages-MIN_NUM_FORMS': '0', 'messages-MAX_NUM_FORMS': '1000',
+            'messages-0-sender': 'support', 'messages-0-text': 'پاسخ', 'messages-0-ticket': str(ticket.id),
+        })
+        self.assertEqual(ticket.messages.count(), 1)
+        self.assertEqual(Notification.objects.filter(user_id=77, type='ticket_replied').count(), 1)
+
+    def test_a_users_own_message_does_not_notify_them(self):
+        from notifications.models import Notification
+
+        ticket = Ticket.objects.create(user_id=78, subject='s', category='c')
+        TicketMessage.objects.create(ticket=ticket, sender='user', text='سلام')
+        self.assertFalse(Notification.objects.filter(user_id=78).exists())