Idempotency keys stored after the charge, not before

Traced a double-charge bug that had nothing to do with retry timing or refunds. It was write...