Reframe healthcare filing as standard vs expedited; e2e test + bug fixes

Copy: drop paper/electronic/fax framing across the revalidation + enrollment
marketing pages and the order-confirmation email; present two service tiers:
- Standard filing  (no CMS account; we prepare CMS-855, you sign, we submit to MAC)
- Expedited filing (CMS I&A surrogate access; same-day PECOS filing + tracking)
Internal worker todos + the _STANDARD_FILING_SLUGS identifier updated to match.

New scripts/test_healthcare_e2e.py validates the whole order line (slug
consistency x6 places, price agreement, intake field collection+enforcement,
worker dispatch, handler execution producing CMS-855 PDF+anchor, free-tool
action_urls). 45 checks.

Bugs found + fixed by the test:
- medicare-enrollment requires practice_state server-side but the wizard never
  enforced it -> orders could be paid then stall. Wizard now requires it.
- determine_form_type defaulted org NPIs to the individual 855I because
  enumeration_type is never collected -> wrong form, CMS rejection. Now does a
  live NPPES lookup (safe 855I fallback).

site/src/components/intake/steps/NpiIntakeStep.astro

@@ -157,6 +157,16 @@
     if (!email) missing.push("Email");
     else if (!/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email)) missing.push("a valid Email");
 
+    // Medicare enrollment requires the practice/MAC routing state (server-side
+    // required field). Enforce it here so the order can't be submitted without
+    // it and then stall in fulfilment.
+    const activeSlugs = PW.get().batch_slugs
+      || [document.querySelector(".pw-wizard[data-service]")?.getAttribute("data-service")
+          || PW.get().service_slug || ""];
+    if (activeSlugs.includes("medicare-enrollment") && !val("npi-practice-state")) {
+      missing.push("Practice State (required for Medicare enrollment)");
+    }
+
     if (missing.length) {
       evt.preventDefault();
       errDiv.hidden = false;

site/src/pages/services/healthcare/medicare-enrollment.astro

@@ -46,14 +46,15 @@ const description = "New to Medicare or adding a practice location? We assemble
       <h2>How it works (without sharing your password)</h2>
       <ol>
         <li>You place the order and give us your NPI and basic practice details.</li>
-        <li>We send a one-time link to add us as a <strong>Surrogate</strong> in CMS I&amp;A. You never share your login.</li>
         <li>We pull your NPPES record and identify exactly which 855 forms apply.</li>
-        <li>We file in <strong>Internet-based PECOS</strong> under our own CMS credentials and track it through your MAC.</li>
+        <li>We prepare your CMS-855 package and send a secure link for you to review and sign the certification.</li>
+        <li>We submit it to your Medicare Administrative Contractor (MAC) and track it through to approval.</li>
       </ol>
       <div class="pw-callout">
-        <strong>Prefer paper?</strong> We can complete a paper CMS-855 instead,
-        send it for your wet signature, and mail it to your Medicare
-        Administrative Contractor (CMS does not accept faxed 855s).
+        <strong>Need it filed faster?</strong> Choose <strong>expedited</strong> at
+        checkout and add us as a <strong>Surrogate</strong> in CMS Identity &amp;
+        Access. We then file directly in PECOS under our own credentials and
+        capture the tracking ID the same day. You never share your login.
       </div>
     </section>
 

site/src/pages/services/healthcare/npi-revalidation.astro

@@ -73,8 +73,8 @@ const description = "CMS requires every enrolled provider and supplier to revali
         password.</strong>
       </p>
       <ul>
-        <li><strong>Paper CMS-855 (easiest, nothing to set up).</strong> We complete the correct CMS-855 form, you e-sign the certification page from a secure link (about a minute), and we print it and mail it to your Medicare Administrative Contractor (MAC). CMS does not accept faxed 855s, so we handle the mailing.</li>
-        <li><strong>Internet-based PECOS (faster, needs a CMS account).</strong> You add us as a <strong>Surrogate</strong> in the CMS Identity &amp; Access (I&amp;A) system; we then file in PECOS under our own credentials and capture the tracking ID.</li>
+        <li><strong>Standard filing (nothing to set up).</strong> We complete the correct CMS-855, you approve and sign the certification from a secure link in about a minute, and we submit it to your Medicare Administrative Contractor (MAC) and track it to confirmation.</li>
+        <li><strong>Expedited filing (needs a CMS account).</strong> You add us as a <strong>Surrogate</strong> in the CMS Identity &amp; Access (I&amp;A) system; we then file directly in PECOS under our own credentials and capture the tracking ID the same day.</li>
       </ul>
     </section>