Summary

Adds the Kilo Pass Impact Advocate referral program flow, reward lifecycle, attribution safeguards, and post-launch Kilo Pass bonus behavior.

• Adds Kilo Pass-specific Impact Advocate configuration, widget/token routing, participant registration, and referral page UI.
• Records product-scoped referral and affiliate touches, then resolves Kilo Pass paid conversions with referral-priority attribution.
• Grants double-sided Kilo Pass referral rewards for eligible first monthly Stripe conversions, applies one pending reward per future eligible monthly issuance, and blocks stacking with other bonus-like issuance items.
• Queues Impact Advocate reward redemptions for Kilo Pass reward allocations so Impact reporting matches the local reward ledger without making Impact the source of truth.
• Handles Kilo Pass referral adverse-payment cancellation/review flows for refunds, fraud, and chargebacks.
• Adds operational handling for referral state, including an hourly Kilo Pass referral reward expiration cron and a local script for applying pending referral bonuses during manual testing.
• Redirects /subscriptions/kilo-pass visitors back to /subscriptions when they do not have a Kilo Pass subscription.
• Removes the hidden month-2 50% welcome promo cutoff behavior so Kilo Pass matches the production first-month-only promo copy.

Verification

Full end-to-end manual verification of the Kilo Pass referral flow with Impact Advocate, including signup attribution, paid conversion, local reward allocation/application, SALE reporting, and Impact Advocate reward redemption retry behavior.

Visual Changes

Reviewer Notes

• Spec alignment: this PR implements and updates behavior governed by .specs/impact-referrals.md, especially Kilo Pass program separation, 30-day attribution, reward expiry, Impact redemption reporting, and first-month-only welcome bonus behavior.
• Impact redemption is reporting/reconciliation only. The local referral reward ledger remains authoritative for eligibility, application, cancellation, reversal, billing, and access.
• Operational behavior: Kilo Pass referral reward expiry uses the hourly Vercel cron at /api/cron/kilo-pass-expire-referral-rewards; queued affiliate/Advocate dispatch now also backfills missing Kilo Pass reward redemption rows.
• Product isolation: Kilo Pass Advocate config is treated as invalid if it reuses KiloClaw/default program or widget IDs.
• Review focus: attribution resolution for first paid Kilo Pass Stripe invoices, affiliate SALE suppression, referral_bonus mutual exclusion with normal bonus issuance, and Impact Advocate redemption retry/failure states.