Validate Stripe credentials (no side effects)

Validates a Stripe secret or restricted key (and optional webhook secret) against Stripe's /v1/account endpoint. Probes tax/billing/invoicing capabilities when scoped keys are provided. Returns account metadata on success. No database writes. Requires a secret key with the ADMIN role.