Store service: shared-hosting bootstrap source

<?php
declare(strict_types=1);
// Standalone dedicated-backend public entry; NOT a replacement for your store's index.
// Private archive root must be ../private/kdpika-store relative to this public directory.
// Only POST /provider-event; no setup UI, secret URL token, browser CLI or direct files.
ini_set('display_errors', '0');
if (($_SERVER['REQUEST_METHOD'] ?? '') !== 'POST' || ($_SERVER['REQUEST_URI'] ?? '') !== '/provider-event') {
    http_response_code(404); header('Content-Type: application/json'); echo '{"accepted":false}'; exit;
}
try {
    $root = realpath(__DIR__); $private = realpath(dirname(__DIR__) . '/private/kdpika-store');
    if ($root === false || $private === false || str_starts_with($private . '/', $root . '/')) { throw new RuntimeException('Private backend required'); }
    $environment = require $private . '/environment.php';
    if (!is_array($environment)) { throw new RuntimeException('Private configuration required'); }
    foreach ($environment as $name => $value) {
        if (!is_string($name) || !preg_match('/\AKDP_[A-Z0-9_]+\z/D', $name) || !is_string($value) || preg_match('/[\r\n\x00]/', $value)) { throw new RuntimeException('Invalid environment'); }
        putenv($name . '=' . $value);
    }
    require $private . '/stores/service.php';
} catch (Throwable) {
    http_response_code(503); header('Content-Type: application/json'); header('Cache-Control: no-store'); echo '{"accepted":false}';
}

<?php
declare(strict_types=1);
// Private shared-hosting CLI bootstrap; php stores/cron.php work | inspect | mail.
// Loads environment.php outside web root. Never invoke through an HTTP cron URL.
if (PHP_SAPI !== 'cli') { http_response_code(404); exit; }
try {
    if ($argc !== 2 || !in_array($argv[1], ['work', 'inspect', 'mail'], true)) { throw new RuntimeException('Choose work, inspect or mail'); }
    $environment = require dirname(__DIR__) . '/environment.php';
    if (!is_array($environment)) { throw new RuntimeException('Private environment required'); }
    foreach ($environment as $name => $value) {
        if (!is_string($name) || !preg_match('/\AKDP_[A-Z0-9_]+\z/D', $name) || !is_string($value) || preg_match('/[\r\n\x00]/', $value)) { throw new RuntimeException('Invalid environment'); }
        putenv($name . '=' . $value);
    }
    require __DIR__ . ($argv[1] === 'mail' ? '/mail.php' : '/service.php');
} catch (Throwable) { fwrite(STDERR, "Store configuration requires private review.\n"); exit(1); }