release: dos.me checkout envelope fix + SSO cleanup + CI hygiene

[JOY (JOY)]

Promote dev to main

• fix(billing): unwrap dos.me { success, data } response envelope — Purchase/Portal/Cancel read url at the endpoint shape; the wrapper made every field undefined (Purchase did nothing, Portal redirected to /undefined). Verified against live dos.me: checkout now returns a Stripe URL.
• SSO worker retirement fallout cleanup, one-off CodeQL dismissal workflow (alert 1567) added + removed after success, CI hygiene.

Deploy notes

• prod env billing keys already live (DOS_SHARED_BILLING / DOS_ME_API_URL / DOS_ME_INTERNAL_API_KEY, backup .bak.20260919)
• post."Media" status/processingError columns already applied on prod via DOS.Me#810
• 2 known code-scanning checks stay red (CodeQL SSRF false positive — runtime guarded; upstream farcaster lint debt) — same rationale as release: DOS shared billing live, upstream sync 90 commits, SSO worker retirement #41

[gemini-code-assist]

Code Review

This pull request introduces a video clipping feature to Crove Post, leveraging Temporal workflows, Deepgram transcription, OpenAI analysis, and RunPod rendering to turn YouTube videos into short vertical clips. It also adds an MCP clipping widget, integrates clipping limits into the billing system, migrates ESLint to version 9, and establishes a frontend testing baseline with Vitest and Playwright. Feedback on the changes highlights a potential runtime TypeError in clipping.service.ts due to an unsafe non-null assertion on the organization object, and a limitation in the dos-me-billing.client.ts unwrapping logic that fails to handle primitive payload types.

[gemini-code-assist]

The org object returned by getOrgByIdWithSubscription can be null if the organization is not found or has been deleted. Using the non-null assertion operator (org!) on line 168 will cause a runtime TypeError when trying to access properties of null inside checkCredits. Adding a defensive null check prevents potential application crashes.

Suggested change

	const org = await this._organizationService.getOrgByIdWithSubscription(
	organizationId
	);
	return (await this._subscriptionService.checkCredits(org!, CREDITS_TYPE))
	const org = await this._organizationService.getOrgByIdWithSubscription(
	organizationId
	);
	if (!org) {
	return 0;
	}
	return (await this._subscriptionService.checkCredits(org, CREDITS_TYPE))
	.credits;

[gemini-code-assist]

The unwrapping logic currently restricts body.data to be of type 'object'. If any dos.me API endpoint returns a primitive value (such as a string, number, or boolean) inside the data envelope, this check will fail and return the wrapped body instead of the unwrapped value. Removing the typeof body.data === 'object' constraint allows the client to robustly unwrap all successful responses regardless of the payload type.

    if (
      body &&
      typeof body === 'object' &&
      'success' in body &&
      'data' in body
    ) {
      return body.data as T;
    }