refactor: strip iOS-only concerns from backend

Stripe subscriptions moved to MTRX iOS (Apple IAP). Backend no longer
handles user billing.

Removed:
- runtime/subscriptions/ (stripe client, tiers, feature gate, usage tracker,
  revenue reporter, audit/conversion services, metered billing)
- runtime/referrals/ (tied to subscription tiers)
- scripts/stripe_setup.py
- tests/test_subscriptions.py, tests/test_metered_billing.py
- web/pricing.html
- /subscription/* endpoints from gateway
- /referral/* endpoints from gateway
- /metered/* endpoints from gateway
- /pricing page handler
- APNs push registration endpoint (/bridge/v1/push/register) from bridge

Added:
- Procfile for Heroku/Railway deployment
- railway.toml with Dockerfile build + /health check
- setup_telegram.py — standalone CLI to configure Telegram bot after
  initial setup. Auto-discovers chat ID by waiting for the first message,
  sends a test message, persists to config and .env.
- PORT env var support (Railway convention) in gateway/server.py

Updated:
- .env.example: removed Stripe vars, added PORT note
- openmatrix.config.json.example: removed subscriptions block

Author: Neo

.env.example

@@ -7,6 +7,7 @@
 # OPENMATRIX_API_KEY=
 # OPENMATRIX_HOST=0.0.0.0
 # OPENMATRIX_PORT=18790
+# PORT=                        # Railway/Heroku assign this automatically; takes precedence
 
 # ── Model providers ──
 # OPENAI_API_KEY=
@@ -21,12 +22,6 @@
 # TELEGRAM_BOT_TOKEN=
 # OWNER_TELEGRAM_ID=          # Your Telegram user ID — used by the bridge approval gate
 
-# ── Stripe (subscription payments) ──
-# STRIPE_SECRET_KEY=
-# STRIPE_WEBHOOK_SECRET=
-# STRIPE_PRO_PRICE_ID=
-# STRIPE_ENTERPRISE_PRICE_ID=
-
 # ── Social media ──
 # TWITTER_API_KEY=
 # TWITTER_API_SECRET=

Procfile

@@ -0,0 +1 @@
+web: python -m gateway.server

gateway/bridge.py

@@ -494,7 +494,6 @@ def __init__(self, config: dict, gateway_server):
         self._config = config
         self._server = gateway_server
         self._linked_wallets: dict[str, dict] = {}  # session_id → wallet info
-        self._push_tokens: dict[str, str] = {}  # session_id → APNs token
         self._web3_manager = None  # lazy; built on first balance lookup
 
     def _get_web3_manager(self):
@@ -548,9 +547,6 @@ def register_routes(self, app: web.Application) -> None:
         app.router.add_get("/bridge/v1/config", self.get_config)
         app.router.add_get("/bridge/v1/services", self.get_services)
 
-        # Push notifications
-        app.router.add_post("/bridge/v1/push/register", self.register_push)
-
         # Dashboard (aggregated data for iOS home screen)
         app.router.add_get("/bridge/v1/dashboard", self.get_dashboard)
 
@@ -881,24 +877,6 @@ async def get_components_manifest(self, request: web.Request) -> web.Response:
             logger.error(f"Bridge get_components_manifest error: {e}", exc_info=True)
             return MobileResponse.error(str(e), 500)
 
-    # ─── Push Notifications ───────────────────────────────────────────────
-
-    async def register_push(self, request: web.Request) -> web.Response:
-        """Register APNs push token for a session."""
-        try:
-            body = await request.json()
-        except Exception:
-            return MobileResponse.error("Invalid JSON")
-
-        session_id = body.get("session_id", "")
-        token = body.get("push_token", "")
-
-        if not session_id or not token:
-            return MobileResponse.error("session_id and push_token required")
-
-        self._push_tokens[session_id] = token
-        return MobileResponse.ok({"registered": True})
-
     # ─── Dashboard ────────────────────────────────────────────────────────
 
     async def get_dashboard(self, request: web.Request) -> web.Response:

gateway/server.py

@@ -311,12 +311,6 @@
     "block_on_critical": true,
     "block_on_high": false
   },
-  "subscriptions": {
-    "trial_days": 3,
-    "stripe_webhook_secret": "YOUR_STRIPE_WEBHOOK_SECRET",
-    "stripe_pro_price_id": "YOUR_STRIPE_PRO_PRICE_ID",
-    "stripe_enterprise_price_id": "YOUR_STRIPE_ENTERPRISE_PRICE_ID"
-  },
   "social": {
     "twitter": {
       "api_key": "YOUR_TWITTER_API_KEY",

openmatrix.config.json.example

@@ -0,0 +1,10 @@
+[build]
+builder = "DOCKERFILE"
+dockerfilePath = "Dockerfile"
+
+[deploy]
+startCommand = "python -m gateway.server"
+healthcheckPath = "/health"
+healthcheckTimeout = 30
+restartPolicyType = "ON_FAILURE"
+restartPolicyMaxRetries = 10