fix: add /change-email route in index.ts + fix SQL query escaping in keys.ts

- Register GET /change-email route in src/index.ts (serves change-email.html)
- Fix updateKeyEmail() SQL query string (dollar signs were stripped by heredoc)
- Fix updateEmailByCustomer() SQL query string
- Rebuild TypeScript dist/

src/index.ts

@@ -217,6 +217,11 @@ app.get("/terms", (_req, res) => {
   res.sendFile(path.join(__dirname, "../public/terms.html"));
 });
 
+app.get("/change-email", (_req, res) => {
+  res.setHeader('Cache-Control', 'public, max-age=3600');
+  res.sendFile(path.join(__dirname, "../public/change-email.html"));
+});
+
 app.get("/status", (_req, res) => {
   res.setHeader("Cache-Control", "public, max-age=60");
   res.sendFile(path.join(__dirname, "../public/status.html"));

src/services/keys.ts

@@ -134,6 +134,6 @@ export async function updateEmailByCustomer(stripeCustomerId: string, newEmail:
   const entry = keysCache.find(k => k.stripeCustomerId === stripeCustomerId);
   if (!entry) return false;
   entry.email = newEmail;
-  await pool.query(UPDATE api_keys SET email = $1 WHERE stripe_customer_id = $2, [newEmail, stripeCustomerId]);
+  await pool.query("UPDATE api_keys SET email = $1 WHERE stripe_customer_id = $2", [newEmail, stripeCustomerId]);
   return true;
 }