Webhooks arrive twice and out of order: making payment callbacks duplicate-safe in Laravel

A valid payment callback can still arrive twice, late, or before the event it depends on. Here is how I make the handler safe with transactions, lockForUpdate, status transitions and a version column.