fix: validate ticket type matches entitlement in series purchase

server/api/series/[id]/tickets/purchase.post.js

@@ -53,6 +53,14 @@ export default defineEventHandler(async (event) => {
 
     const { ticketInfo } = validation;
 
+    // Validate submitted ticket type matches entitlement (prevents price mismatch)
+    if (body.ticketType && body.ticketType !== ticketInfo.ticketType) {
+      throw createError({
+        statusCode: 422,
+        statusMessage: `Ticket type mismatch: you are entitled to "${ticketInfo.ticketType}" but submitted "${body.ticketType}"`,
+      })
+    }
+
     // For paid tickets, require payment ID
     if (!ticketInfo.isFree && !paymentId) {
       throw createError({