PCI-sensitive operations run on your API + Stripe / Razorpay — this SPA never holds secret keys. Configure publishable keys in environment.payment and expose REST endpoints listed in BillingCheckoutService.
Payment center — Inventory go-live links, billing checkout, then optional PDF/export add-ons.