feat(billing): integrate Stripe for subscription management and billing access

- Added billing-related fields to the User model in the database.
- Implemented functions for managing billing access, including trial periods and subscription statuses.
- Created new billing utility functions for Stripe integration.
- Updated onboarding page to include billing overview and workspace creation eligibility.
- Enhanced route access checks to require billing access for certain actions.
- Implemented cleanup scripts for expired billing workspaces and associated media.
- Updated header component to conditionally show app navigation based on billing access.
- Added new migrations for billing-related database changes.

app/api/projects/[projectId]/members/route.ts

@@ -1,6 +1,6 @@
 import { NextRequest } from 'next/server';
 import { db } from '@/lib/db';
-import { auth } from '@/lib/auth';
+import { auth, checkProjectAccess } from '@/lib/auth';
 import { InvitationRole, ProjectMemberRole } from '@prisma/client';
 import { rateLimit } from '@/lib/rate-limit';
 import { buildInvitationUrl, createOrRefreshInvitation, sendInvitationEmail } from '@/lib/invitations';
@@ -29,11 +29,12 @@ export async function GET(request: NextRequest, { params }: RouteParams) {
             return apiErrors.notFound('Project');
         }
 
+        const access = await checkProjectAccess(project, session.user.id);
         const isOwner = project.ownerId === session.user.id;
         const isMember = project.members.length > 0;
         const isAdmin = project.members[0]?.role === ProjectMemberRole.ADMIN;
 
-        if (!isOwner && !isMember) {
+        if (!access.hasAccess || (!isOwner && !isMember)) {
             return apiErrors.forbidden('Access denied');
         }
 
@@ -105,10 +106,11 @@ export async function POST(request: NextRequest, { params }: RouteParams) {
             return apiErrors.notFound('Project');
         }
 
+        const access = await checkProjectAccess(project, session.user.id, { intent: 'manage' });
         const isOwner = project.ownerId === session.user.id;
         const isAdmin = project.members[0]?.role === ProjectMemberRole.ADMIN;
 
-        if (!isOwner && !isAdmin) {
+        if (!access.canEdit || (!isOwner && !isAdmin)) {
             return apiErrors.forbidden('Only project owners and admins can invite members');
         }