NitroShock.ai v1.3

Hardens the credit-usage pipeline so the platform is the single source of truth for every balance change, and refunds an account affected by a stale-cache rollback.

Credit System & Billing

• Platform-authoritative deductions - the /wp-json/nitroshock/v1/report-usage endpoint now always recomputes the new balance from the current ledger and ignores any client-supplied new_balance. Companion plugins can no longer overwrite an account's balance, even accidentally from a stale local cache.
• Replay protection - usage reports are logged with feature and source URL on the platform side, giving every deduction a verifiable origin in the transaction history.

Security

• Trust boundary tightened - authoritative balance state lives only on nitroshock.ai. Customer-site plugins are now treated as untrusted reporters that submit events, not balances.