Production provisioning path.

This is the operator-facing checklist for turning a signup into a real customer workspace.

Customer submits signup and selects a plan.
Billing intent is created. In production, checkout or invoice status must be confirmed.
Cloudflare Worker creates customer and workspace records in D1.
Workspace services are inserted into workspace_services table.
Provisioning task enters Queue for async setup.
Resend sends approval/setup email to owner/admin.
Customer dashboard becomes available behind upstream auth.
Site Operator Brain routes first command to the correct cabinet brain.

Worker files included

cloudflare-saas-provisioning-worker/ contains the Worker API, wrangler template, and D1 schema.