🔒️ Live Stripe only in production

With live keys now in the shared credentials file, configured? became true in development and test — checkout/cancel/mode gate on live_mode? (production, or explicit STRIPE_LIVE=1) so local runs and the test suite always simulate. Caught when a test stubbing production hit live Stripe.