Add GoCardless monthly instalments for event ticket checkout.

Organisations can enable instalments and set a per-event payment count; buyers complete a Direct Debit mandate and tickets are issued once the schedule is created.

Merge pull request #222 from symbiota-coop/cursor/remove-bar-chart-border-radius-74a5

Remove border radius from bar charts

Remove rounded corners from bar charts.

Drop Chart.js borderRadius so bars render with square corners.

Co-authored-by: Stephen Reid

Remove the Circles iframe and restore the post-booking donation form.

remove skills

Switch OpenRouter chat defaults to Gemini 3.7 Flash with low reasoning.

Keep unused refund_deleted_orders field so stale event-edit forms don't 500.

Fixes DANDELION-3C

Always refund deleted orders, with a no-refunds option only when deleting an event.

mcp and skill changes

Remove GoCardless Direct Debit signup at checkout

The Ferrum-driven join-at-checkout flow was barely used and is no longer offered.

🔒 Lengthen check-in secret to 128-bit HMAC and compare in constant time

🐛 Scope event page order lookup to the event

Bump json to 2.21.2 for Dependabot GHSA-9hj4-r449-hfvc

✨ Match event T&Cs checkbox label to organisation

✨ Allow terms and conditions to be set per event

✨ Default collect_phone on for new organisations

✨ Add org setting to optionally collect phone at checkout

🐛 Preserve event settings when duplicating

Ensure duplicated events retain their configurable display, ticketing, notification, tracking, and tax options.

✨ Optionally email order confirmation to other ticketholders

✨ Allow scheduling feedback requests after events