Cross-tenant payment monitor. Refunds respect role limits (PLATFORM_ADMIN ≤ ₦50,000).
Read-only — provider configuration requires SUPER_ADMIN.