Fulfill Session

In-page key reveal for a paid Stripe checkout session. Runs one fulfillment cycle (idempotent with the timer — mints + emails if not already) then returns the key minted for THIS session id, if any. If fulfillment has not caught up yet, returns {pending:true} and the buyer falls back to the emailed key.