feat(faza-f): ePay/CF backend swap — /api/cf/* proxies to gis-api

Plan 003 Faza F. Pilot users (session.useGisAc=true) get their CF
extract flow routed through api.gis.ac (RLS-filtered, RLS-owned
writes); everyone else keeps the legacy /api/ancpi/* path
unchanged. Feature-flag preserves rollback.

New routes (5):
- POST /api/cf/order        → gisApi.enrichment.cf.create. Forwards
  409 catalog_hit verbatim.
- GET  /api/cf/orders       → gisApi.enrichment.cf.list (limit, offset, status).
- GET  /api/cf/[id]         → gisApi.enrichment.cf.get.
- PATCH /api/cf/[id]        → gisApi.enrichment.cf.patch.
- GET  /api/cf/[id]/pdf     → streams gisApi.enrichment.cf.getPdf
  through to browser. Filename from documentName via cf.get; falls
  back to cf-<id>.pdf.
- GET  /api/cf/catalog      → gisApi.enrichment.catalog.

All use getAuthSession() → 401 on no session, forward GisApiError
status+code+body, fallback {error:"internal_error", hint} at 500.
runtime=nodejs, dynamic=force-dynamic.

Helper module `cf-api-base.ts`:
- cfApiBase(useGisAc) → "/api/cf" | "/api/ancpi"
- adaptCfRow(row) → maps gisApi.CfExtractRow into the UI shape
  expected by epay-tab.tsx (CfExtractRecord). Fields not in gis-api
  (siruta, judetName, uatName, errorMessage, etc.) default to
  empty/zero — filter-by-judet/uat on the pilot path is reduced
  until gis-api enriches the response.
- fetchCfOrdersList, fetchCfHasCompletedForCadastral, placeCfOrder,
  cfDownloadUrl — used by components.

UI changes:
- epay-tab.tsx: reads session.useGisAc; list fetch, reorder, single
  + bulk download routed via helpers. UI shape unchanged.
- epay-order-button.tsx: existence check uses catalog endpoint on
  gis-ac path; order placement uses placeCfOrder which treats 409
  catalog_hit as a soft success ("Extras CF valid").

Known gaps (followups):
- /api/ancpi/session still serves ePay session/credits — no gis-api
  equivalent today. epay-connect.tsx untouched.
- ZIP bulk download has no gis-api analog; "Descarcă tot" falls back
  to N tabs on gis-ac path.
- src/app/api/geoportal/cf-status returns hardcoded /api/ancpi/download
  URL — separate followup.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

src/app/api/cf/order/route.ts

@@ -0,0 +1,71 @@
+// POST /api/cf/order — Plan 003, Faza F.
+//
+// Server-side proxy to gisApi.enrichment.cf.create(). Used by parcel-sync's
+// ePay UI when session.useGisAc === true. Legacy callers (flag=0) continue
+// hitting /api/ancpi/order; this route MUST NOT replace it.
+//
+// Body: { nrCadastral: string, siruta?: string, gisFeatureId?: string }
+//
+// Responses:
+//   200 → CfExtractRow (new order created or pending one returned)
+//   409 → { error: "catalog_hit", existing: CfExtractRow } — forwarded verbatim
+//   401 → no session
+//   400 → invalid body / missing nrCadastral
+//   Other → forwards GisApiError.status + .code
+import { NextResponse } from "next/server";
+import { getAuthSession } from "@/core/auth/require-auth";
+import { gisApi, GisApiError } from "@/lib/gis-api-client";
+
+export const runtime = "nodejs";
+export const dynamic = "force-dynamic";
+
+interface CfOrderBody {
+  nrCadastral?: string;
+  siruta?: string;
+  gisFeatureId?: string;
+}
+
+export async function POST(request: Request) {
+  const session = await getAuthSession();
+  if (!session) {
+    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+  }
+
+  let body: CfOrderBody;
+  try {
+    body = (await request.json()) as CfOrderBody;
+  } catch {
+    return NextResponse.json({ error: "invalid_body" }, { status: 400 });
+  }
+
+  const nrCadastral = body?.nrCadastral?.trim();
+  if (!nrCadastral) {
+    return NextResponse.json(
+      { error: "missing_fields", required: ["nrCadastral"] },
+      { status: 400 },
+    );
+  }
+
+  try {
+    const result = await gisApi.enrichment.cf.create({
+      nrCadastral,
+      siruta: body.siruta,
+      gisFeatureId: body.gisFeatureId,
+    });
+    return NextResponse.json(result);
+  } catch (err) {
+    if (err instanceof GisApiError) {
+      // Forward catalog_hit (409) verbatim so the UI can show the existing row.
+      return NextResponse.json(
+        { error: err.code, status: err.status, body: err.body },
+        { status: err.status },
+      );
+    }
+    const msg = err instanceof Error ? err.message : String(err);
+    console.error("[cf-order] internal error:", msg);
+    return NextResponse.json(
+      { error: "internal_error", hint: msg.slice(0, 200) },
+      { status: 500 },
+    );
+  }
+}