feat: payment integration, billing fixes, and dev config updates

[jstevens888]

Implements and stabilizes cross-platform payment flows for Android and iOS.

Changes included:

• Google Play billing integration with standard_monthly and premium_monthly products
• Fix NOT NULL constraint on payment_subscription_id for non-Stripe platforms
• Add aws.s3.bucket-name to dev properties for local backend startup
• Bump version to 1.0.0+38
• Add web-build.zip to .gitignore
• Merge notification feature from team_d
• Dev config updates for payment testing

Blocked/pending:

• iOS in-app purchases pending professor Apple Developer account resolution
• Google Play server-side purchase verification pending service account JSON

[github-actions]

CareConnect Quality Gate Report

BLOCKED — One or more required checks failed. Fix the issues below before merging.

CareConnect — Security & Quality Analysis Report

Report Header

Field	Value
Generated (UTC)	2026-03-28 06:10:24 UTC
Pipeline Run	#627
Trigger	pull_request
Scan Root	.

All timestamps are reported in Coordinated Universal Time (UTC).

Pull Request

Field	Value
PR Number	#330
PR Author	@jstevens888
Source Branch	team_d
Target Branch	main

Commit Details

Field	Value
Commit SHA	c46befa (full)

Legend

Status	Meaning
SUCCESS	Tool ran and found no violations
FAILURE	Tool found one or more violations
DISABLED	Tool is not yet configured
Enforced	Violations from this tool will block the merge
Advisory	Violations are reported but will not block the merge

Tool Results Summary

Tool	Category	Status	Role	Findings
trufflehog	Secrets Scan	FAILURE	Enforced	44 finding(s)
gitleaks	Secrets Scan	FAILURE	Enforced	20 finding(s)
flutter_analyze	SAST — Flutter	FAILURE	Enforced	1486 finding(s)
checkstyle	SAST — Java	FAILURE	Enforced	29690 finding(s)
pmd	SAST — Java	FAILURE	Enforced	11293 finding(s)
spotbugs	SAST — Java	FAILURE	Enforced	709 finding(s)
semgrep	SAST — Multi	FAILURE	Enforced	53 finding(s)
pylint	SAST — Python	FAILURE	Enforced	180 finding(s)
bandit	SAST — Python	FAILURE	Enforced	39 finding(s)
htmlhint	SAST — Web	FAILURE	Enforced	623 finding(s)
stylelint	SAST — Web	FAILURE	Enforced	15 finding(s)
dependency_check	SCA — Multi	SUCCESS	Enforced	—
trivy	SCA — Container	FAILURE	Enforced	39 finding(s)

---

Full artifact bundle available in the workflow run artifacts.