Hosted payments after owner approval — no raw card handling.

RFJ should manage deposits, monthly rent, receipts, and payment status, but payment collection must stay provider-hosted and audit-logged.