<?php
// GET /api/protected/checkout.php — requires login
require_once __DIR__ . '/../init.php';
$user = AuthMiddleware::verifyToken();
Response::success("Checkout ready for {$user['username']}.", ['order' => null]);
