Security & Race Condition Fixes

SQL injection protection with whitelist validation, campaign budget race condition fixes with database-level locks, billing idempotency to prevent double-charging, and GDPR consent detection.