ops: seed stripe test catalog and write price ids to docs

[daopunk]

Parent: #68

Related: #54 (closed — SKU model + seed script shipped via all-access packs; Price IDs still pending in docs/commerce/stripe-catalog.md)

Problem

Checkout on the CVM (signal-commerce) maps plan_sku → Stripe Price IDs from env (STRIPE_PRICE_ALL_ACCESS_3 / _10). The idempotent seed script and catalog doc exist, but the generated Price ID table is still _pending seed_. Someone with a test secret key must run the seed and commit the public Price IDs.

Skipped earlier

Blocked in the CVM commerce sidecar workstream: no sk_test_… was available in the agent environment (script refuses live keys).

Deliverables

• Run with a Stripe test secret key:

  STRIPE_SECRET_KEY=sk_test_... npm run stripe:seed-catalog -- --write-docs

• Confirm docs/commerce/stripe-catalog.md generated block has real price_… IDs (not secrets)
• Put the same IDs into local/CVM env (docker/.env / docker/.phala.env — not committed):
  • STRIPE_PRICE_ALL_ACCESS_3
  • STRIPE_PRICE_ALL_ACCESS_10
• Optional: paste IDs into a comment here for ops handoff

How to get the key

Stripe Dashboard → Test mode on → Developers → API keys → Secret key (sk_test_…).

References

• scripts/stripe-seed-catalog.mjs
• docs/commerce/stripe-catalog.md
• docs/plans/2026-09-22-stripe-cvm-commerce-sidecar.md (Option A hosting)

Unblocks

Checkout smoke / Plans CTAs once commerce is deployed with Price IDs in env (#55 / #61 spine).

[daopunk]

Tracked as a child of epic #68. Catalog model/script from #54; this issue is the remaining ops run with sk_test_… + --write-docs.

[daopunk]

Seeded test catalog (ops deliverable):

• Product: prod_VLrFdkiQzlcrpp (Sigstack All-Access)
• all-access-3 → price_1UL9WmKDFZS5PEar2Y7pyhN0 ($10/mo)
• all-access-10 → price_1UL9WmKDFZS5PEarCbTlmIyn ($25/mo)

Committed in docs/commerce/stripe-catalog.md on branch feat/stripe.

Local/CVM env (not committed): set the same STRIPE_PRICE_* values. Webhook secret still needs a real Dashboard or stripe listen whsec_… for production/CVM (local smoke used a local signing secret).

[daopunk]

Catalog seeded and Price IDs written to docs. Remaining Stripe smoke/webhook Dashboard secret is follow-on ops, not this ticket.

[daopunk]

Reopened so merge of #83 can close via Closes keywords (not closed out-of-band).