Start a credit purchase

Creates a Stripe Checkout session for a credit pack and returns its URL. The session binds to the key on the request, so the credits land on that key when payment completes; poll GET /api/v1/credits to confirm. An agent can create the session itself and hand its human one URL, which is the only step it cannot take. Returns 503 while self-serve purchase is closed, with the contact path in meta.