d-points: dejar sólo Stripe y SumUp con compra de PD funcional

Elimina las pestañas de PayPal/dLocal/Crypto/Skrill y por país; deja
Información + Stripe + SumUp (las dos únicas pasarelas que se usarán).

- Stripe: totalmente funcional reutilizando createCheckoutSession + webhook
  + página de éxito. Nueva ruta /api/dpoints/checkout crea la sesión con
  importe elegido por el usuario (1 unidad = 100 PD).
- SumUp: integración real (lib/sumup.ts) mediante checkout hospedado,
  habilitada al definir SUMUP_API_KEY/SUMUP_MERCHANT_CODE; si no, avisa.
- Nuevo servicio de entrega `dpoints` (lib/paid-services.ts) que acredita
  PD en home_api_points; entrega idempotente vía reclamo atómico.
- Página /d-points-success entrega ambos proveedores (session_id/ref).
- Iconos SVG generados para cada pasarela (stripe/sumup, marca + wordmark).
- Moneda configurable con DP_CURRENCY (por defecto EUR).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

web-next/app/api/dpoints/checkout/route.ts

@@ -0,0 +1,78 @@
+import { randomUUID } from 'crypto'
+import { getSession } from '@/lib/session'
+import { createCheckoutSession } from '@/lib/stripe'
+import { createSumUpCheckout, sumupConfigured } from '@/lib/sumup'
+import { PD_PER_UNIT, DP_MIN_AMOUNT, DP_MAX_AMOUNT } from '@/lib/dpoints'
+
+/**
+ * Inicia la compra de PD por Stripe o SumUp. El importe lo elige el usuario
+ * (1 unidad = 100 PD). Devuelve la URL de checkout a la que redirigir.
+ */
+export async function POST(request: Request) {
+  const session = await getSession()
+  if (!session.accountId || !session.username) {
+    return Response.json({ success: false, error: 'notAuthenticated' }, { status: 401 })
+  }
+
+  let body: Record<string, unknown> = {}
+  try {
+    body = await request.json()
+  } catch {
+    return Response.json({ success: false, error: 'invalidRequest' }, { status: 400 })
+  }
+
+  const provider = String(body.provider ?? '')
+  if (provider !== 'stripe' && provider !== 'sumup') {
+    return Response.json({ success: false, error: 'invalidProvider' }, { status: 400 })
+  }
+
+  const amount = Number(body.amount)
+  if (!Number.isInteger(amount) || amount < DP_MIN_AMOUNT || amount > DP_MAX_AMOUNT) {
+    return Response.json({ success: false, error: 'invalidAmount' })
+  }
+
+  const points = amount * PD_PER_UNIT
+  const site = process.env.SITE_URL || ''
+  const ip = (request.headers.get('x-forwarded-for') || '').split(',')[0].trim() || '0.0.0.0'
+  const currency = process.env.DP_CURRENCY || 'eur'
+
+  if (provider === 'stripe') {
+    const r = await createCheckoutSession({
+      accountId: session.accountId,
+      username: session.username,
+      email: session.bnetEmail || '',
+      acoreIp: ip,
+      amount,
+      currency,
+      characterName: session.username,
+      productName: `${points} PD`,
+      successUrl: `${site}/d-points-success?provider=stripe`,
+      cancelUrl: `${site}/d-points`,
+      metadata: {
+        service: 'dpoints',
+        accountId: String(session.accountId),
+        points: String(points),
+        amount: String(amount),
+      },
+    })
+    if (!r.success || !r.url) return Response.json({ success: false, error: 'stripeError' })
+    return Response.json({ success: true, url: r.url })
+  }
+
+  // provider === 'sumup'
+  if (!sumupConfigured()) return Response.json({ success: false, error: 'notConfigured' })
+  const reference = randomUUID()
+  const r = await createSumUpCheckout({
+    accountId: session.accountId,
+    username: session.username,
+    email: session.bnetEmail || '',
+    acoreIp: ip,
+    amount,
+    points,
+    reference,
+    description: `${points} PD`,
+    returnUrl: `${site}/d-points-success?provider=sumup&ref=${reference}`,
+  })
+  if (!r.success || !r.url) return Response.json({ success: false, error: r.error || 'sumupError' })
+  return Response.json({ success: true, url: r.url })
+}