feat: B1 Google Play Billing 票据校验

- 新增 GooglePlayVerifier（调 Google Play Developer API 二次校验票据）
- StoreVerifier.verify 扩展 productId 参数，订单/控制器链路同步
- DisabledStoreVerifier 加条件装配，Google 启用后自动切换
- application.yml 增加 pay.google 配置（凭证经环境变量注入，默认关闭）

fruitshorts-app-api/src/main/java/com/fruitshorts/app/controller/AppCommerceController.java

@@ -67,6 +67,8 @@ public class AppCommerceController {
     @PostMapping("/orders/verify")
     public Result<Orders> verify(@RequestBody Map<String, String> body) {
         return Result.ok(orderService.verifyAndDeliver(SecurityUtils.getAppUserId(),
-                body.getOrDefault("platform", ""), body.getOrDefault("receipt", "")));
+                body.getOrDefault("platform", ""),
+                body.getOrDefault("productId", ""),
+                body.getOrDefault("receipt", "")));
     }
 }

fruitshorts-app-api/src/main/resources/application.yml

@@ -57,6 +57,12 @@ fruitshorts:
     admin-ttl-hours: 12
   cors:
     allowed-origins: "*"
+  pay:
+    google:
+      # 接入 Google Play Billing 后置 true，并注入服务账号 JSON
+      enabled: false
+      package-name: com.nontonki
+      service-account-json: ${GOOGLE_PLAY_SERVICE_ACCOUNT_JSON:}
 
 logging:
   level: