[Task] License/entitlement API contract for NPO Software storefront

[apescic-director]

Context

APES-NPO-Software-Website is the public Laravel/Cloudron storefront + customer portal. License/entitlement engine ownership is this repo (APES.Digital.Software).

Needed from Digital Software

Define and implement a license/entitlement API consumed by the storefront portal (stubbed there first).

Draft contract (v0)

• POST /entitlements — create entitlements after paid order (order_id, customer_id, sku, quantity, stripe_refs)
• GET /entitlements?customer_id= — list entitlements for portal downloads gating
• GET /licenses?customer_id= — list licenses (id, sku, status, masked_key, created_at, expires_at)
• POST /licenses/{id}/reveal — reveal full key (audited)
• Webhook or poll for license revoke/suspend events

Related storefront issues

• [Epic] Customer portal: downloads, licenses, invoices APES-NPO-Software-Website#27
• [Task] Open tracking issues on APES.Digital.Software for license API contract APES-NPO-Software-Website#32
• [Task] Map paid orders to Digital Software entitlement events (contract + stub) APES-NPO-Software-Website#26

Acceptance

• API contract agreed
• Auth model for service-to-service calls documented
• Storefront can swap fake adapter for real client