Idempotency Keys

Make retries safe. Build the mechanism that stops a double-clicked 'Pay' button from charging twice: cache a response by its idempotency key and replay it, reject a key reused with a different request, expire keys after a TTL, and scope keys per user so they never collide.