Role-based membership with Stripe, PayPal, or manual admin activation.
Paid roles create a subscription record immediately. Stripe/PayPal sandbox checkout is used when API keys and gateway plan IDs are configured.
