Access needs a real gate.

Not unlocked in static HTML. A browser-only “paid = true” flag is not security. GitHub Pages and Cloudflare Pages can serve this page, but only a Cloudflare Worker can verify provider webhooks, check a server-side entitlement, and issue a signed short-lived token.

When the Worker is configured, route this page through it and replace this message with the verified feature content. See worker.html for the deployment contract.