"why": "Stripe Connect OAuth live flip (Claude session over the operator tunnel): installed the re-sealed /data/connect.env — live OAuth client pair replacing the sandbox pair — via lchat-env-install, restarted lchat-connect, verified /config?service=stripe serves the live client id. No other box changes.",