fraud-prevention

Adds an admin-managed ruleset that blocks checkout when billing or shipping data matches configured fragments (street, city, county, postcode, phone), using case-insensitive substring and digit-only phone matching. Includes an audit log of blocked attempts, a per-store kill switch, and an inline rule-impact preview based on recent orders and quotes.