pricing: land £7/£70 paid tier and make behaviour match

Marketing + behaviour pass to get the site ready for Paddle approval.

Pricing page
- £7/month, £70/year headline (was "Coming soon").
- Bigger tier names (was 11px uppercase mono — looked like chips).
- Real CTAs (button base styles were only scoped to .hero__ctas).
- "Best value" badge + drop-shadow on the Paid card; full-width
  block CTAs that align across both cards.
- "Free vs Paid at a glance" comparison table beneath the cards.
- Compact "Invite a friend — both get 50% off for 3 months"
  callout with the detail explanation behind a <dialog> popup.

Tier copy + behaviour now consistent
- Free strategic-log refresh is every 6 hours, not hourly. New
  read-side filter on /api/log/{latest,by-date} restricts free
  users to logs at boundary hours (00/06/12/18 UTC); paid users
  still see the most recent.
- Follow-up chat is paid-only. /api/chat returns 402 for free;
  the chat sidebar on /log is replaced with a locked aside and
  chat.js no longer loads at all for free users.
- Dashboard meta lines + landing copy softened so they no longer
  promise hourly to everyone.

Future-proofing copy on public pages
- Dropped "free forever" wording (we may close the free tier).
- "Trading 212 CSV" became "broker CSV (Trading 212 today; more
  planned)" on pricing + landing; the actual import UIs stay
  T212-specific.

Terms
- Renamed Terms of Service -> Terms and Conditions (Paddle
  expectation), bumped last-updated to 2026-05-26.
- New §6 Refunds covering the 14-day cooling off, post-window
  cancellation, termination-by-us refunds, statutory rights, and
  how to request a refund.
- Renumbered §7-§14 and fixed the disclaimer link labels.

Tests
- 6 new tests in tests/test_chat_and_log_gates.py cover the
  chat 402 + the boundary-hour filter on both log endpoints.
- Full suite: 205 passed, 5 skipped, 0 failed.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

app/routers/pages.py

@@ -12,7 +12,7 @@ from app.auth import CurrentUser, maybe_current_user, require_auth, require_toke
 from app.config import get_settings, load_groups
 from app.db import get_session
 from app.models import EmailSend, Referral, StrategicLog, User
-from app.services.access import paid_status
+from app.services.access import is_paid_active, paid_status
 from app.services.referral_service import assign_code_if_missing
 from app.templates_env import templates
 
@@ -37,7 +37,8 @@ async def root_page(
     return templates.TemplateResponse(
         request,
         "dashboard.html",
-        {"groups": list(groups.keys()), "anchor": s.CASSANDRA_ANCHOR_DATE, "cu": cu},
+        {"groups": list(groups.keys()), "anchor": s.CASSANDRA_ANCHOR_DATE,
+         "cu": cu, "paid": is_paid_active(cu)},
     )
 
 
@@ -74,41 +75,40 @@ async def _resolve_log_date(session: AsyncSession, day: str | None) -> date:
     return datetime.now(timezone.utc).date()
 
 
-def _log_page_context(target: date) -> dict:
+def _log_page_context(target: date, paid: bool) -> dict:
     s = get_settings()
     return {
         "selected_iso": target.isoformat(),
         "selected_month": target.strftime("%Y-%m"),
         "current_tone": s.CASSANDRA_TONE.upper(),
         "current_analysis": s.CASSANDRA_ANALYSIS.upper(),
+        "paid": paid,
     }
 
 
-@router.get(
-    "/log",
-    response_class=HTMLResponse,
-    dependencies=[Depends(require_token)],
-)
+@router.get("/log", response_class=HTMLResponse)
 async def log_page(
     request: Request,
     session: AsyncSession = Depends(get_session),
+    cu: CurrentUser = Depends(require_auth),
 ):
     target = await _resolve_log_date(session, None)
-    return templates.TemplateResponse(request, "log.html", _log_page_context(target))
+    return templates.TemplateResponse(
+        request, "log.html", _log_page_context(target, is_paid_active(cu)),
+    )
 
 
-@router.get(
-    "/log/{day}",
-    response_class=HTMLResponse,
-    dependencies=[Depends(require_token)],
-)
+@router.get("/log/{day}", response_class=HTMLResponse)
 async def log_page_day(
     request: Request,
     day: str,
     session: AsyncSession = Depends(get_session),
+    cu: CurrentUser = Depends(require_auth),
 ):
     target = await _resolve_log_date(session, day)
-    return templates.TemplateResponse(request, "log.html", _log_page_context(target))
+    return templates.TemplateResponse(
+        request, "log.html", _log_page_context(target, is_paid_active(cu)),
+    )
 
 
 @router.get("/settings", response_class=HTMLResponse)