feat(member): account/profile polish + tier upgrade flow

- Timezone: curated USelectMenu dropdown (app/config/timezones.js), preserves unknown saved values
- Profile save now uses useToast() for success/error; remove inline save banner
- Nav onboarding dot nudged down 1px for optical alignment with lowercase text
- Onboarding: skip a suggestion with POST /api/onboarding/track {skip}; member.onboarding.skipped map; does not affect graduation
- CirclePicker takes :saved-value so 'Current' badge stays until save completes
- PrivacyToggle is binary (USwitch labeled Private); member schema enum reduced to ['members','private']; zod coerces legacy 'public'
- New /member/payment-setup page: HelcimPay $0 verify + update-contribution, wired from account.vue via requiresPaymentSetup redirect
- Helcim portal: NUXT_PUBLIC_HELCIM_PORTAL_URL env + account.vue 'Manage billing in Helcim' link
- Migration script: scripts/migrate-privacy-public-to-members.js

server/api/onboarding/status.get.js

@@ -14,6 +14,8 @@ export default defineEventHandler(async (event) => {
 
   const hasClickedWiki = !!member.onboarding?.wikiClicked
 
+  const skipped = member.onboarding?.skipped || {}
+
   return {
     goals: {
       hasProfileTags,
@@ -21,6 +23,12 @@ export default defineEventHandler(async (event) => {
       hasEngagedBoard,
       hasClickedWiki,
     },
+    skipped: {
+      profileTags: !!skipped.profileTags,
+      visitEvent: !!skipped.visitEvent,
+      board: !!skipped.board,
+      wiki: !!skipped.wiki,
+    },
     completedAt: member.onboarding?.completedAt || null,
   }
 })

server/api/onboarding/track.post.js

@@ -7,13 +7,21 @@ import { logActivity } from '../../utils/activityLog.js'
 
 export default defineEventHandler(async (event) => {
   const member = await requireAuth(event)
-  const { goal } = await validateBody(event, onboardingTrackSchema)
+  const { goal, skip } = await validateBody(event, onboardingTrackSchema)
 
   // Already graduated — no-op
   if (member.onboarding?.completedAt) {
     return { success: true }
   }
 
+  // Skip path: mark suggestion as skipped so the UI advances.
+  if (skip) {
+    await Member.findByIdAndUpdate(member._id, {
+      $set: { [`onboarding.skipped.${skip}`]: true },
+    })
+    return { success: true }
+  }
+
   // Idempotent — already tracked
   if (member.onboarding?.[goal]) {
     return { success: true }

server/models/member.js

@@ -80,42 +80,42 @@ const memberSchema = new mongoose.Schema({
   privacy: {
     pronouns: {
       type: String,
-      enum: ["public", "members", "private"],
+      enum: ["members", "private"],
       default: "members",
     },
     timeZone: {
       type: String,
-      enum: ["public", "members", "private"],
+      enum: ["members", "private"],
       default: "members",
     },
     avatar: {
       type: String,
-      enum: ["public", "members", "private"],
-      default: "public",
+      enum: ["members", "private"],
+      default: "members",
     },
     studio: {
       type: String,
-      enum: ["public", "members", "private"],
+      enum: ["members", "private"],
       default: "members",
     },
     bio: {
       type: String,
-      enum: ["public", "members", "private"],
+      enum: ["members", "private"],
       default: "members",
     },
     location: {
       type: String,
-      enum: ["public", "members", "private"],
+      enum: ["members", "private"],
       default: "members",
     },
     socialLinks: {
       type: String,
-      enum: ["public", "members", "private"],
+      enum: ["members", "private"],
       default: "members",
     },
     craftTags: {
       type: String,
-      enum: ["public", "members", "private"],
+      enum: ["members", "private"],
       default: "members",
     },
   },
@@ -142,6 +142,12 @@ const memberSchema = new mongoose.Schema({
     eventPageVisited: { type: Boolean, default: false },
     boardPageVisited: { type: Boolean, default: false },
     wikiClicked: { type: Boolean, default: false },
+    skipped: {
+      profileTags: { type: Boolean, default: false },
+      visitEvent: { type: Boolean, default: false },
+      board: { type: Boolean, default: false },
+      wiki: { type: Boolean, default: false },
+    },
   },
 
   createdAt: { type: Date, default: Date.now },

server/utils/schemas.js

@@ -1,7 +1,12 @@
 import * as z from 'zod'
 import { ADMIN_ALERT_TYPES } from '../models/adminAlertDismissal.js'
 
-const privacyEnum = z.enum(['public', 'members', 'private'])
+// Binary privacy: 'members' = visible to signed-in members, 'private' = hidden.
+// Legacy 'public' is accepted from old clients and coerced to 'members'.
+const privacyEnum = z.preprocess(
+  (v) => (v === 'public' ? 'members' : v),
+  z.enum(['members', 'private'])
+)
 
 export const emailSchema = z.object({
   email: z.string().trim().toLowerCase().email()
@@ -367,7 +372,10 @@ export const inviteAcceptSchema = z.object({
 // --- Onboarding schemas ---
 
 export const onboardingTrackSchema = z.object({
-  goal: z.enum(['eventPageVisited', 'boardPageVisited', 'wikiClicked'])
+  goal: z.enum(['eventPageVisited', 'boardPageVisited', 'wikiClicked']).optional(),
+  skip: z.enum(['profileTags', 'visitEvent', 'board', 'wiki']).optional(),
+}).refine((v) => v.goal || v.skip, {
+  message: 'Must provide goal or skip',
 })
 
 // --- Tag schemas ---