Never mark a crypto order paid twice: confirmations, reorgs and out-of-order webhooks

A classic crypto checkout bug goes like this. A webhook comes in, the shop marks the order paid, a...