polish the api route, response, health, cache, and metrics

config/env.php

@@ -21,5 +21,24 @@ return [
   'frontend_header' => 'web-v1',   // your SPA sets: X-Dewemoji-Frontend: web-v1
 
   // Free daily limit for API (Pro/Whitelist are unlimited)
-  'free_daily_limit' => 50,
+  'free_daily_limit' => 30,
+
+  'gateway_mode' => 'sandbox', // 'sandbox' or 'live'
+
+  // Gumroad
+  'gumroad' => [
+    // product_ids allowed (array); if empty => accept any product (useful for sandbox)
+    'product_ids' => ['YOUR_GUMROAD_PRODUCT_ID_SUB', 'YOUR_GUMROAD_PRODUCT_ID_LIFETIME'],
+    'verify_url'  => 'https://api.gumroad.com/v2/licenses/verify',
+  ],
+
+  // Mayar
+  'mayar' => [
+    'api_base'     => 'https://api.mayar.id', // adjust if your doc shows a different base
+    'secret_key'   => 'sk_test_xxx',          // if required for Mayar verify
+    // Endpoints — keep configurable; adjust to exact spec later
+    'endpoint_verify'    => '/v1/license/verify',    // software license code verify
+    'endpoint_activate'  => '/v1/license/activate',  // for subscription type only
+    'endpoint_deactivate'=> '/v1/license/deactivate'
+  ],
 ];