Fix e-payment settings payload, cart race, and media/content helpers.

Stop returning passwordSet (forbidNonWhitelisted), upsert carts safely, and harden related media/product/workshop flows.

Co-authored-by: Cursor <cursoragent@cursor.com>

src/business-settings/business-settings.util.ts

@@ -249,8 +249,6 @@ export function sanitizeBusinessSettingsForClient(
           mellat: {
             ...mellat,
             password: '',
-            // Clients treat non-empty passwordSet via a parallel field — see
-            // get/update response shaping in BusinessSettingsService.
           },
         },
       },
@@ -258,10 +256,6 @@ export function sanitizeBusinessSettingsForClient(
   };
 }
 
-export function mellatPasswordSet(settings: BusinessSettings): boolean {
-  return settings.store.ePayment.gateways.mellat.password.length > 0;
-}
-
 /** Whether a gateway is enabled and has enough credentials to initiate. */
 export function isGatewayReady(
   settings: EPaymentSettings,