Create a Stripe Connect onboarding link
Creates the merchant's STANDARD connected account on first call (pass-through model; the
merchant owns their Stripe relationship) and returns a hosted onboarding link (single-use,
expiring). returnUrl/refreshUrl are validated against the origin allowlist. Not a
fund-moving write; 403 when the merchant's plan does not include Connect ecommerce.