Billing upgrade/downgrade, inviti in app e diretta YouTube da mobile.

Upgrade Stripe con addebito immediato; downgrade programmato a fine periodo.
UX billing più sobria con box info; icone piani. API inviti e OAuth YouTube
per staff trasmissione; deep link join; scelta partita programmata o nuova.

Co-authored-by: Cursor <cursoragent@cursor.com>

backend/app/controllers/youtube_oauth_callback_controller.rb

@@ -13,7 +13,11 @@ class YoutubeOauthCallbackController < ActionController::Base
     end
 
     user = User.find(ctx[:user_id])
-    team = user.manageable_teams.find(ctx[:team_id])
+    team = Team.find(ctx[:team_id])
+    unless user.can_stream_for?(team) || team.club&.owned_by?(user)
+      return redirect_to_oauth_error("Non autorizzato a collegare YouTube per questa squadra")
+    end
+
     cred = team.youtube_credential || team.build_youtube_credential
     cred.update!(
       access_token: tokens[:access_token],
@@ -22,7 +26,12 @@ class YoutubeOauthCallbackController < ActionController::Base
       channel_id: tokens[:channel_id],
       channel_title: tokens[:channel_title]
     )
-    redirect_to "#{public_base_url}/teams/#{team.id}/dettagli?youtube=connected", allow_other_host: true
+
+    if ctx[:return_app]
+      redirect_to "matchlivetv://youtube-connected?team_id=#{team.id}", allow_other_host: true
+    else
+      redirect_to "#{public_base_url}/teams/#{team.id}/dettagli?youtube=connected", allow_other_host: true
+    end
   rescue ArgumentError, Youtube::BroadcastService::Error => e
     redirect_to_oauth_error(e.message)
   end