chore: remediate CI blockers for production readiness

apps/web/lib/admin-api.ts

@@ -176,7 +176,7 @@ export const adminApi = {
     apiClient.get<UserDetail>(`/admin/users/${userId}`),
 
   updateUserStatus: (userId: string, isActive: boolean, reason?: string) =>
-    apiClient.post<{ success: boolean }>('/admin/users/status', {
+    apiClient.patch<{ success: boolean }>('/admin/users/status', {
       userId,
       isActive,
       reason,

apps/web/lib/api-client.ts

@@ -121,6 +121,9 @@ export const apiClient = {
   patch: <T>(endpoint: string, body?: unknown, headers?: HeadersInit) =>
     request<T>(endpoint, { method: 'PATCH', body, headers }),
 
+  put: <T>(endpoint: string, body?: unknown, headers?: HeadersInit) =>
+    request<T>(endpoint, { method: 'PUT', body, headers }),
+
   delete: <T>(endpoint: string, headers?: HeadersInit) =>
     request<T>(endpoint, { method: 'DELETE', headers }),
 };

apps/web/lib/listings-api.ts

@@ -268,7 +268,7 @@ export const listingsApi = {
   },
 
   updateStatus: (id: string, status: ListingStatus, moderationNotes?: string) =>
-    apiClient.post<{ status: string }>(`/listings/${id}/status`, {
+    apiClient.patch<{ status: string }>(`/listings/${id}/status`, {
       status,
       moderationNotes,
     }),

apps/web/lib/listings-server.ts

@@ -16,7 +16,9 @@ const API_BASE_URL = process.env['NEXT_PUBLIC_API_URL'] || 'http://localhost:300
 export async function fetchListingById(id: string): Promise<ListingDetail | null> {
   try {
     const res = await fetch(`${API_BASE_URL}/listings/${id}`, {
-      next: { revalidate: 300 }, // ISR: re-validate every 5 min
+      // Listing detail includes mutable status, price, legal and moderation data.
+      // Avoid serving stale details after admin/user actions.
+      cache: 'no-store',
     });
 
     if (!res.ok) return null;

apps/web/lib/subscription-api.ts

@@ -71,7 +71,7 @@ export const subscriptionApi = {
     }),
 
   upgradeSubscription: (newPlanTier: string) =>
-    apiClient.post<{ message: string }>('/subscriptions/upgrade', {
+    apiClient.put<{ message: string }>('/subscriptions/upgrade', {
       newPlanTier,
     }),