Policies & enforcement

Cutoffs (`cancel_cutoff_hours`, `reschedule_cutoff_hours`) block actions when the current time is within the defined hours before start.

Status checks: cancelled or expired bookings cannot be changed.

Token validation: tokens are stored in booking meta `_rocwp_wcphoto_token`; invalid tokens are rejected.