Self-healing worker and safer Stripe

The audio worker reclaims stuck jobs after 15 minutes, Stripe calls gained idempotency, and sensitive routes now verify request origin.