switch payment provider from LemonSqueezy to Paddle

Run copier update with payment_provider=paddle to switch all billing
integration: routes, config, schema columns, webhook handling, tests,
and CI deploy secrets. Add one-time migration script for renaming
lemonsqueezy_* columns to paddle_* in production DB.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

.gitlab-ci.yml

@@ -9,7 +9,7 @@ test:
     - pip install uv
   script:
     - cd padelnomics && uv sync
-    - uv run -m pytest tests/ -x -q
+    - uv run pytest tests/ -x -q
     - uv run ruff check src/ tests/
   rules:
     - if: $CI_COMMIT_BRANCH == "master"
@@ -29,4 +29,25 @@ deploy:
     - chmod 700 ~/.ssh
     - echo "$SSH_KNOWN_HOSTS" >> ~/.ssh/known_hosts
   script:
+    - |
+      ssh "$DEPLOY_USER@$DEPLOY_HOST" "cat > /opt/padelnomics/padelnomics/.env" << ENVEOF
+      APP_NAME=$APP_NAME
+      SECRET_KEY=$SECRET_KEY
+      BASE_URL=$BASE_URL
+      DEBUG=false
+      ADMIN_PASSWORD=$ADMIN_PASSWORD
+      DATABASE_PATH=data/app.db
+      MAGIC_LINK_EXPIRY_MINUTES=${MAGIC_LINK_EXPIRY_MINUTES:-15}
+      SESSION_LIFETIME_DAYS=${SESSION_LIFETIME_DAYS:-30}
+      RESEND_API_KEY=$RESEND_API_KEY
+      EMAIL_FROM=${EMAIL_FROM:-hello@example.com}
+      ADMIN_EMAIL=${ADMIN_EMAIL:-}
+      RATE_LIMIT_REQUESTS=${RATE_LIMIT_REQUESTS:-100}
+      RATE_LIMIT_WINDOW=${RATE_LIMIT_WINDOW:-60}
+      PADDLE_API_KEY=$PADDLE_API_KEY
+      PADDLE_WEBHOOK_SECRET=$PADDLE_WEBHOOK_SECRET
+      PADDLE_PRICE_STARTER=$PADDLE_PRICE_STARTER
+      PADDLE_PRICE_PRO=$PADDLE_PRICE_PRO
+      ENVEOF
+    - ssh "$DEPLOY_USER@$DEPLOY_HOST" "chmod 600 /opt/padelnomics/padelnomics/.env"
     - ssh "$DEPLOY_USER@$DEPLOY_HOST" "cd /opt/padelnomics && git pull origin master && ./deploy.sh"