test: add Qedix complex production risk case

[Madhava88q]

Adds a controlled production-looking Remix API route for Qedix evaluation.

This intentionally includes:

• request body driven database mutation
• task run update by request-controlled id
• webhook-like Stripe event processing
• missing signature verification evidence
• missing idempotency evidence
• missing tenant/organization ownership scope evidence

Expected Qedix behavior:

• Review recommended or High risk
• Evidence around database mutation, webhook/payment safety, idempotency, tenant/project scope, and input validation.

[qedix]

Qedix review could not complete

Qedix could not finish the advisory evidence review for this pull request.

Open Qedix evidence report

Advisory only. Maintainers decide.