Idempotency keys: stop charging customers twice when they double-click Pay

A customer taps Pay. The spinner hangs for four seconds, so they tap it again. Or their phone drops...