release: the mint→provision fold, extracted and pinned

[mahmutkaya]

Release — the mint→provision fold is extracted and pinned

One commit (#240). No migrations, no behaviour change — a pure extraction plus tests.

openProvisioningPr could never be reached in tests (it needs a PROVISION_GITHUB_TOKEN; staging has none —
measured). mintForProposal and buildTenantRegistryEntry were tested on either side, but the five lines
between them — which decide which of the mint's three outputs lands in which field — were not. A swap
there puts a URL into stripe_account:, and nothing downstream checks the shape.

applyMintToProvisionInput (pure) now does the fold; two mutants — fields swapped, and key-present-but-
undefined — both red on exactly the right assertions.

Rollout: no migration step. Build, pull, up -d, verify /api/health.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud