Ingest Conversions

Producer conversion self-report ingest with attribution window validation.

Explicitly invokes reconcile() to match producer-reported conversions against Warrant's token_confirmed referrals and record payout ledger rows.

THE HOLE (found in the security sweep): this endpoint was completely UNAUTHENTICATED while writing PayoutLedger rows via reconcile() — any anonymous caller could self-report conversions for ANY adapter_id and trigger a real payout-ledger write. It is a producer self-report ingest, so it is now gated the same way every other adapter-scoped producer surface is: a verified producer bearer token whose principal holds a Membership in the org that owns body.adapter_id (mirrors app.routes.portal._authenticate_and_authorize_adapter / the H1 fix in app.routes.consumer). No report item is validated and reconcile() is never called until authentication AND ownership both pass.