refactor: full codebase overhaul — dead code removal, env validation, logger migration, date consolidation, Prisma schema cleanup, button consistency, useEffect deps, test coverage

- env.ts: added 10 missing Zod-validated env vars (imager, paypal currency, argon2/bcrypt params)
- Migrated 6 modules from process.env to validated env.* (auth, proxy-auth, paypal, password, redis, imager, moderation, alert, logger)
- Replaced console.warn/error with pino logger in 9 server-side modules
- Removed 50+ dead exports (SWF wrappers, coalesceHotelName, signIn, isStaff re-export, formatTimestamp, Skeleton/SkeletonCard, 4 unused housekeeping sections)
- Consolidated date formatting: 28 files migrated to shared formatDate() from @/lib/format-date
- Wired 4 radio/settings API routes through cached siteSettings service instead of raw Prisma queries
- Added getMany()/getAll() helpers to SiteSettings service
- Removed 88 dead Prisma model definitions (schema 2763→1846 lines)
- Created admin action-helper.ts with wrapAction() for standardized error handling
- Fixed useEffect dependency arrays in 4 data-heavy components
- Replaced raw btn CSS classes with shadcn Button component across admin pages
- Stripped dead i18n namespaces (common, pages.client) from all 22 translation files
- Removed 2 dead scripts (create-release.sh, check-local-imports.ts)
- Fixed knip.json configuration
- Added 7 new test suites: format-date, paypal, moderation, alert, webhook, action-helper, and fixed password.test.ts for env mocking
- All 358 tests passing across 72 test files
- TypeScript: 0 errors

src/lib/services/paypal.ts

@@ -1,35 +1,25 @@
 // PayPal v2 REST helper (Orders API) for the top-up flow. SDK-free: uses the
-// global fetch only. Credentials and base URL come from process.env because they
-// are not declared in src/env.ts:
-//   PAYPAL_CLIENT_ID   – REST app client id
-//   PAYPAL_SECRET      – REST app secret
-//   PAYPAL_API         – API base, defaults to the sandbox host
-//   PAYPAL_CURRENCY    – ISO currency for orders, defaults to USD
-//   PAYPAL_CREDITS_PER_USD – credits granted per 1.00 unit, defaults to 100
-//
-// The website has no dedicated balance column (see prisma/schema.prisma — User
-// carries `credits`, the in-game wallet), so a top-up credits the buyer's
-// `credits` wallet via sendCurrency(), exactly like the voucher flow.
+// global fetch only. Credentials and base URL come from env (see src/env.ts).
+
+import { env } from "@/env";
 
 export const PAYPAL_API =
-	process.env.PAYPAL_API?.replace(/\/+$/, "") ??
+	env.PAYPAL_API?.replace(/\/+$/, "") ??
 	"https://api-m.sandbox.paypal.com";
 
-export const PAYPAL_CURRENCY = (
-	process.env.PAYPAL_CURRENCY ?? "USD"
-).toUpperCase();
+export const PAYPAL_CURRENCY = env.PAYPAL_CURRENCY.toUpperCase();
 
 /** Credits granted per 1.00 of the order currency (configurable, sane default). */
 export function creditsPerUnit(): number {
-	const n = Number(process.env.PAYPAL_CREDITS_PER_USD ?? "100");
+	const n = env.PAYPAL_CREDITS_PER_USD;
 	return Number.isFinite(n) && n > 0 ? n : 100;
 }
 
 export class PayPalConfigError extends Error {}
 
 function credentials(): { clientId: string; secret: string } {
-	const clientId = process.env.PAYPAL_CLIENT_ID;
-	const secret = process.env.PAYPAL_SECRET;
+	const clientId = env.PAYPAL_CLIENT_ID;
+	const secret = env.PAYPAL_SECRET;
 	if (!clientId || !secret) {
 		throw new PayPalConfigError(
 			"PayPal is not configured. Set PAYPAL_CLIENT_ID and PAYPAL_SECRET.",
@@ -40,7 +30,7 @@ function credentials(): { clientId: string; secret: string } {
 
 /** True when both PayPal credentials are present. */
 export function isPayPalConfigured(): boolean {
-	return Boolean(process.env.PAYPAL_CLIENT_ID && process.env.PAYPAL_SECRET);
+	return Boolean(env.PAYPAL_CLIENT_ID && env.PAYPAL_SECRET);
 }
 
 /** OAuth2 client-credentials token (short-lived; we fetch one per request). */