Cross-tenant payment monitor. Refunds respect role limits (PLATFORM_ADMIN ≤ ₦50,000).
Toggle providers; secrets are write-only and stored encrypted.