Secret bindings

Secrets live in Cloudflare Workers secrets (not editable here). Required:

• RESEND_API_KEY — for email delivery
• TWILIO_ACCOUNT_SID, TWILIO_AUTH_TOKEN, TWILIO_PHONE_NUMBER — for SMS
• STRIPE_SECRET_KEY — for payment links on invoices
• JWT_SECRET — for signing view-only tokens
• CALLRAIL_WEBHOOK_TOKEN — auth header on /webhooks/callrail
• FEATURABLE_PLACE_ID (optional) — for Google review polling

Set them via wrangler secret put <NAME>.