Fulfillment desk

Queues work items for later Cloud Run fulfillment. Nothing here calls Stripe. Agent-sourced rows are refused unless confirm is true.