Paid AI image jobs on Cloudflare Queues: never charge twice, never call the model twice

Design notes from a photo-restyling app: an atomic debit plus job insert in D1, a queue consumer that can't re-enter a paid model call, a vision check before and after generation, and a daily cost breaker.