feat: add pricing quality controls

Add robust outlier detection, stale valuation metadata, and audited seller-scoped market-value overrides with migration and tests.

apps/api/tests/http/pricing-routes.test.js

@@ -25,4 +25,23 @@ test('accepts a protected pricing observation and valuation request', async (tes
   assert.equal(valuationResponse.statusCode, 200);
   assert.equal(valuationResponse.json().data.valueMinor, 2500);
   assert.equal(csrfChecks, 2);
+});
+
+test('accepts a CSRF-protected market-value override', async (testContext) => {
+  let received;
+  const app = buildApp({
+    authenticateAdmin: async () => ({ userId: 'user-1', sellerId: 'seller-1' }),
+    authorizeUnsafeRequest: async () => {},
+    pricingService: { async override(input) { received = input; return { id: 'override-1', ...input }; } },
+  });
+  testContext.after(() => app.close());
+  const response = await app.inject({
+    method: 'POST',
+    url: '/api/v1/admin/inventory/21eb218b-7a95-4f80-a9e3-e306f7ca1f2e/valuation/override',
+    headers: { 'x-csrf-token': 'csrf' },
+    payload: { valueMinor: 2600, reason: 'Verified recent sale' },
+  });
+  assert.equal(response.statusCode, 201);
+  assert.equal(received.actorUserId, 'user-1');
+  assert.equal(response.json().data.valueMinor, 2600);
 });