feat: harden sessions and track downstream acknowledgements

api/src/billing/billing.controller.ts

@@ -1,6 +1,7 @@
 import { Body, Controller, Get, Post } from '@nestjs/common';
 import { ApiTags } from '@nestjs/swagger';
 import { TenantId } from '../common/tenant-id.decorator';
+import { RequireRecentAuthentication } from '../auth/require-recent-authentication.decorator';
 import {
   BillingService,
   BillingActionDto,
@@ -54,6 +55,7 @@ export class BillingController {
   }
 
   @Post('manual-recharges')
+  @RequireRecentAuthentication()
   createManualRecharge(@Body() body: CreateManualRechargeDto) {
     return this.billing.createManualRecharge(body);
   }
@@ -84,11 +86,13 @@ export class BillingController {
   }
 
   @Post('refund')
+  @RequireRecentAuthentication()
   refund(@Body() body: BillingActionDto) {
     return this.billing.refund(body);
   }
 
   @Post('adjust')
+  @RequireRecentAuthentication()
   adjust(@Body() body: BillingActionDto) {
     return this.billing.adjust(body);
   }