Lesson editor formatting, profile permissions, and Razorpay order creation

Bold formatting now works in all editor blocks, headings are single-line, profile IDOR closed, and Razorpay order ID extraction fixed.