update payment method, remove stripe, paypal, amanapay

docs/ops/RentalDriveGo_Production_Readiness_Plan.md

@@ -75,7 +75,7 @@ Until then, the accurate label remains **capable beta / pre-scale**, not product
 | Domain depth | Prisma: fleet, reservations, billing, payments, notifications, collections, admin |
 | API shape | Express modular monolith |
 | Auth / tenancy | JWT actors, HttpOnly cookies, admin 2FA, company middleware, subscription gates |
-| Payments foundation | Stripe / PayPal / AmanPay; webhook signature verify; `WebhookEvent` |
+| Payments foundation | Manual bank transfer and check for subscription and rental billing; `WebhookEvent` retained for other inbound webhooks |
 | Upload validation | Magic bytes + MIME + size limits |
 | Deploy intent | Compose + Traefik configs, backup/restore scripts present |
 
@@ -127,7 +127,7 @@ flowchart LR
 | Session cookies HttpOnly / Secure / SameSite | `sessionCookies.ts` |
 | Hashed company API keys (legacy plaintext removed) | Hardening reports + schema |
 | Upload magic-byte validation | `http/upload` |
-| Payment webhook signatures | Stripe / PayPal / AmanPay paths |
+| Payment webhook signatures | Online payment webhooks removed; remaining webhooks still verify signatures |
 | Forwarded-header scrubbing by default | `sanitizeForwardedHeaders` unless `TRUSTED_FORWARD_HEADERS=true` |
 | Site payment redirect allowlist | `assertAllowedPaymentRedirect` in `site.service.ts` |
 

docs/ops/key-rotation-drill.md

@@ -9,7 +9,6 @@
 |--------|---------|-----------------|
 | `JWT_SECRET` | API token signing | Invalidates existing employee/admin/renter sessions |
 | Company API keys | Partner/Carplace integrations | Per-company reissue via admin/API |
-| Payment provider webhooks | Stripe/PayPal/AmanPay | Update dashboard + env together |
 | DB / Redis passwords | Compose / managed services | Coordinated restart |
 | Object storage keys | S3/MinIO driver | Dual-key period preferred |