feat(db): mesh data model — meshes, members, invites, audit log

- pgSchema "mesh" with 4 tables isolating the peer mesh domain
- Enums: visibility, transport, tier, role
- audit_log is metadata-only (E2E encryption enforced at broker/client)
- Cascade on mesh delete, soft-delete via archivedAt/revokedAt

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

packages/api/src/modules/billing/router.ts

@@ -0,0 +1,38 @@
+import { Hono } from "hono";
+
+import {
+  checkoutSchema,
+  checkout,
+  getBillingPortalSchema,
+  getBillingPortal,
+  webhookHandler,
+  getCustomerByUserId,
+} from "@turbostarter/billing/server";
+
+import { enforceAuth, validate } from "../../middleware";
+
+export const billingRouter = new Hono()
+  .post("/checkout", validate("json", checkoutSchema), enforceAuth, async (c) =>
+    c.json(
+      await checkout({
+        user: c.var.user,
+        ...c.req.valid("json"),
+      }),
+    ),
+  )
+  .get(
+    "/portal",
+    enforceAuth,
+    validate("query", getBillingPortalSchema),
+    async (c) =>
+      c.json(
+        await getBillingPortal({
+          user: c.var.user,
+          ...c.req.valid("query"),
+        }),
+      ),
+  )
+  .get("/customer", enforceAuth, async (c) =>
+    c.json(await getCustomerByUserId(c.var.user.id)),
+  )
+  .post("/webhook", (c) => webhookHandler(c.req.raw));