Same idempotency key, different arguments: refuse the mismatch

The agent paid the invoice once. Then the model regenerated the tool call for a retry, kept the same...