34a44043f2
GP_GRIN1_RAIL now defaults OFF. Unset/off, GoblinPay behaves like the pre-rail server: no arti/Tor code path runs, no loopback Foreign API listener, no invoice slates issued, and the pay page shows ONLY 'Pay with Goblin' (no switcher, no grin1 UI, footer unchanged) — even for an invoice armed while the rail was on. Enabled, the two-rail switcher renders with the Goblin tab default-selected; the switcher chrome appears only when BOTH rails are available (a single rail renders its panel directly). - config: default flip + docs; env example + README gain the opt-in block. - checkout: build_info gates all grin1 UI on the flag; tests for both states (off => no rail-tab/rail-radio/panel-grin/grin1 strings; on => switcher with rail-goblin checked). - sqlx 0.8 -> 0.9 (workspace): its libsqlite3-sys range (<0.38) unifies with arti's rusqlite, resolving the one-links-per-native-lib conflict that otherwise forbids sqlx-sqlite + in-process arti in one binary. Feature map: runtime-tokio + sqlite (bundled, as before); dynamic COLUMNS queries wrapped in sqlx::AssertSqlSafe (compile-time composed strings).