Shop updates

The shop now keeps new requests closed until its required identity, storage, HTTPS, legal, and payment settings are ready, with clearer administrator actions for completing setup.

• Added a verified tool for moving protected shop records outside the public website folder while keeping the previous copy for rollback.
• Storage migration now pauses other write requests during the verified copy and switch, preventing a record from finishing on the former storage path.
• Added retention review that removes expired personal content and files while preserving required payment, refund, license, and legal evidence.
• Incomplete expired-file cleanup now remains visible, can be retried, and keeps request intake closed until resolved.
• Added a launch interlock so request intake cannot open around unresolved required checks.
• Improved the administrator dashboard and diagnostic with direct actions for remaining launch requirements.
• Strengthened outbound payment and service connections to HTTPS only, without redirects, with certificate and host verification.

The shop now supports approved payments through QRIS, PayPal, DANA, ShopeePay, and BCA bank transfer when the artist has configured the relevant merchant account.

• Added dedicated DANA, ShopeePay, and BCA transfer checkout options with exact-amount and merchant-account verification.
• Clarified that QRIS can also be paid from compatible e-wallet and mobile-banking applications.
• Added an administrator editor for concise public shop updates.
• Improved checkout safeguards so unavailable payment options are not offered to customers.
• Updated the Terms and Privacy Notice for the expanded payment and verification workflow.

Payment records, refunds, callbacks, protected files, and administrator alerts were tightened before public use.

• Payment callbacks now use the configured public HTTPS shop address.
• Manual payments require a unique merchant reference, exact amount, currency, and recipient match.
• Protected uploads are checked for unexpected file changes before download.
• Refund records are tied to the payment they came from.

Unfinished commission forms can be restored after a refresh, and the artist has better tools for reviewing unsafe or abusive requests.

• Restores unfinished form fields in the same browser.
• Keeps English as the default with Bahasa Indonesia available from the language switch.
• Adds a clearer request-to-delivery process and optional private ticket.