feat: get-started comms, alpha ops, and commerce epic wrap

[daopunk]

Summary

• Get-started + entitlement gate copy: Subscribe / alpha → !link → invite → !enable-sigstack.
• Alpha ops CLI: mint-alpha mint|list|revoke plus runbook docs/commerce/alpha-ops.md.
• Epic wrap docs: checklist marks for live webhook + ENTITLEMENTS_ENFORCE=true; work index updated. Epic #68 already closed after CVM ops.

Closes

Closes #63
Closes #60

Commits

1. feat: align get-started and gate denials with pay-link-enable path
2. feat: add alpha list and revoke ops to mint-alpha cli
3. docs: mark commerce epic ops complete and update work index

Ops already on live CVM

(phala deploy --cvm-id 0e82fa77-8b15-4dbd-89c4-9045ab911353 — volumes kept)

Item	Status
Commerce health	https://9adac7636fe255182f699940ffd1924960415507-8082.dstack-pha-prod9.phala.network/health → 200
Stripe test webhook	…-8082…/v1/webhooks/stripe (endpoint enabled; secret in .phala.env)
Enforce	ENTITLEMENTS_ENFORCE=true
Pages commerce base	Actions var PUBLIC_COMMERCE_API_BASE_URL set

Optional smoke (not required to merge)

Browser Plans Subscribe → pay test card → success !link → DM bot → !enable-sigstack. Checklist: docs/commerce/e2e-checklist.md.

Test plan

• Gate + entitlements_store unit tests (list/revoke alpha)
• Site get-started Playwright + content unit
• Local CI / pre-push (fmt, clippy, coverage, commitlint)
• PR checks green (site, rust, commitlint)
• Optional: one paid checkout + Signal link on prod bot