Add multi-tenant cloud mode: self-serve purchase, credit metering, core-decoupling

Introduces RECAP_MODE=multi alongside single-mode self-host:
- Tenant auth + accounts (magic-link via System SMTP), per-tenant credit pool,
  anonymous trial minting with per-IP/-64 caps
- Self-serve Pro/Max purchase: inline Lightning (BTCPay) + card (Zaprite),
  prepaid 30-day periods, expiry-reminder emails
- Core-decoupling: relay owns cloud tier/expiry keyed by Recaps user-id
- SQLite (better-sqlite3) schema for multi-mode; filesystem unchanged for single
- StartOS actions/versions through 0.2.155

startos/versions/v0.2.96.ts

@@ -0,0 +1,12 @@
+import { VersionInfo } from '@start9labs/start-sdk'
+
+export const v_0_2_96 = VersionInfo.of({
+  version: '0.2.96:0',
+  releaseNotes: {
+    en_US: 'Dynamic Free-tier signup card + post-settle balance refresh + better credit-purchase logging. The signup modal\'s Free card was hardcoded to display "N credits at signup" using the relay\'s Core-tier policy as a stand-in — now it uses the operator\'s actual tenant_default_credits config exposed via /api/account/whoami. Copy is dynamic: when tenant_default_credits is 0 (Grant\'s setup — tenants are paying customers, no signup bonus), the card says "Any trial credits you\'ve already earned transfer to your account." When > 0, it adds an "N extra credits at signup, no payment required" bullet on top. Post-settle on credit purchase, the toolbar now reliably refreshes — we call both loadRelayStatus + loadAccount in parallel AND force a render() so every code path that reads credits (toolbar pill, mobile menu, settings) shows the new balance. Added loud warning logging in /api/credits/buy and applyPendingPurchase for the failure modes Grant hit (missing invoice_id in relay response, missing pending_purchases row at settle time) so the next purchase will produce diagnosable server logs.',
+  },
+  migrations: {
+    up: async ({ effects }) => {},
+    down: async ({ effects }) => {},
+  },
+})