fix(auth): scope signup security settings to cloud

[HarshMN2345]

No description provided.

[greptile-apps]

Greptile Summary

This PR scopes two cloud-only features behind isCloud guards: the signup email security settings panel (now hidden on self-hosted) and the payments page (now redirects non-cloud users). It also fixes a TypeError in containerButton.svelte by adding optional chaining to billingPlanDetails access in both branches of the tooltip ternary.

• auth/security/+page.svelte: UpdateSignupEmailSecurity is wrapped in {#if isCloud}, preventing it from rendering on self-hosted instances.
• account/payments/+page.ts: Adds an early redirect(302, '/') guard so non-cloud users can't access the payments page.
• containerButton.svelte: Adds ?. to both billingPlanDetails?.group and billingPlanDetails?.name, resolving the previously flagged null-access risk.

Confidence Score: 5/5

Safe to merge — the three changes are small, well-scoped, and consistent with existing patterns in the codebase.

All three changes are straightforward: optional chaining additions and isCloud conditional guards. The redirect target inconsistency in the payments guard only matters if the app is deployed at a non-root base path, which is an unlikely concern in practice.

src/routes/(console)/account/payments/+page.ts — the redirect target could be aligned with the resolve('/') pattern used elsewhere.

Important Files Changed

Filename	Overview
src/lib/layout/containerButton.svelte	Adds optional chaining for both billingPlanDetails?.group and billingPlanDetails?.name, addressing the previously flagged TypeError risk in both branches of the ternary.
src/routes/(console)/account/payments/+page.ts	Adds an isCloud guard that redirects non-cloud users away from the payments page. The redirect(302, '/') call is correct for SvelteKit 2 but uses a bare '/' instead of resolve('/') from $app/paths as done in other load files.
src/routes/(console)/project-[region]-[project]/auth/security/+page.svelte	Wraps UpdateSignupEmailSecurity in an {#if isCloud} block so the component only renders on cloud deployments — straightforward and correct.

_{Reviews (3): Last reviewed commit: "fix: add missing optional chain on billi..." | Re-trigger Greptile}