Category exclusivity lock

Server-side enforcement of one-business-per-category-per-drop rule. Checkout now blocks the purchase instead of surfacing the conflict after payment attempt. Clearer error messaging when a category is already taken in a zone. Admin override available for edge cases (e.g. franchise vs independent).