Making payment webhooks idempotent

Why providers retry, and how an idempotency key plus an outbox keeps your ledger correct.