fix(security): resolve critical and high technical debt from audit

feat: backlog P0→P3 — toast system, payments, tenant isolation, feedback handler, i18n parity