feat: blocked address protection, LNURL proxy, replay timestamps

- Add lib/changeid.ts for in-process account rekeying
- Block sends to addresses in redis blocked_addresses set, auto-rekey on attempt
- Add created param to credit() for accurate replay timestamps
- Add paid_at to replay() for correct payment dates
- Add /lnurl/proxy endpoint for server-side LNURL callback fetching

Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]>

1 files changed, 2 insertions, 0 deletions

diff --git a/lib/lightning.ts b/lib/lightning.ts
index 3b1882d4..4eb70e00 100644
--- a/lib/lightning.ts
+++ b/lib/lightning.ts
@@ -125,6 +125,7 @@ export async function replay(index) {
     description,
     amount_received_msat,
     payment_preimage: preimage,
+    paid_at,
   } = inv;
 
   const received = Math.round(amount_received_msat / 1000);
@@ -155,6 +156,7 @@ export async function replay(index) {
       memo: invoice.memo,
       ref: preimage,
       type: bolt12 ? PaymentType.bolt12 : PaymentType.lightning,
+      created: paid_at ? paid_at * 1000 : undefined,
     });
 
     return p;