Add multi-tenant cloud mode: self-serve purchase, credit metering, core-decoupling

Introduces RECAP_MODE=multi alongside single-mode self-host:
- Tenant auth + accounts (magic-link via System SMTP), per-tenant credit pool,
  anonymous trial minting with per-IP/-64 caps
- Self-serve Pro/Max purchase: inline Lightning (BTCPay) + card (Zaprite),
  prepaid 30-day periods, expiry-reminder emails
- Core-decoupling: relay owns cloud tier/expiry keyed by Recaps user-id
- SQLite (better-sqlite3) schema for multi-mode; filesystem unchanged for single
- StartOS actions/versions through 0.2.155

startos/versions/v0.2.63.ts

@@ -0,0 +1,12 @@
+import { VersionInfo } from '@start9labs/start-sdk'
+
+export const v_0_2_63 = VersionInfo.of({
+  version: '0.2.63:0',
+  releaseNotes: {
+    en_US: 'Gemini model list cleanup. The Settings → API Keys → Gemini dropdowns now show exactly 5 currently-valid models, verified against Google\'s official docs (ai.google.dev/gemini-api/docs/models): gemini-3.1-pro-preview, gemini-3-flash-preview, gemini-3.1-flash-lite, gemini-2.5-pro, and gemini-2.5-flash. Removed the never-existed gemini-3.1-flash entries from the prior release (Google never had that model — was the source of the 404 errors), the gemini-3-pro-preview entries (Google shut it down 2026-03-09), and gemini-2.0-flash (deprecated). Transcription default is now gemini-3-flash-preview (the actual "Gemini 3 Flash" — Pro-class quality at Flash pricing); analysis default remains gemini-3.1-pro-preview. Fallback chain order: Flash-first for transcription, Pro-first for analysis. Plus: minimize-video button is now visible on mobile (previously hover-only, which never fired on touch devices).',
+  },
+  migrations: {
+    up: async ({ effects }) => {},
+    down: async ({ effects }) => {},
+  },
+})