Fix doc drift; document no-enforce-mode and universal publish

Corrections surfaced by doc-auditor + start9-spec-checker:
- testing.md: api suite 47 -> 54
- payments.md: FK enforcement confirmed at db/mod.rs:29
- startos-packaging.md: publish.sh now ships a universal s9pk
- licensing-tiers.md: record enforce-mode retirement and Creator caps
Refresh Current state for the StartOS submission-blocker work.

docs/guides/licensing-tiers.md

@@ -12,6 +12,17 @@ paths:
 The daemon licenses **itself** via its own licensing scheme — the operator runs a
 master Keysat that issues the license this instance validates.
 
+## Always boots — no enforce mode
+
+Enforce mode was **retired**: there is no `KEYSAT_LICENSE_ENFORCE` build flag and
+`check_at_boot` (`license_self.rs`) always returns `Ok`. A missing/invalid
+self-license logs a warning and the daemon runs at the free **Creator** tier
+(`Tier::Unlicensed`, surfaced as "Creator" in the admin UI) with Creator caps —
+**5 products, 5 policies per product, 10 active discount codes**. Activating a
+license lifts those caps and unlocks `recurring_billing` + `zaprite_payments`.
+Treat any "marketplace build refuses to start without a license" wording in code
+comments or copy as stale.
+
 ## Live entitlements
 
 Tier gates must read **LIVE** entitlements from `licenses.entitlements` (refreshed