Moves the money
- Creates the order with intent AUTHORIZE, so the deposit is a hold, not a payment.
- Captures only the agreed amount, then voids the rest of the authorization.
- Every write carries a fixed PayPal-Request-Id, so a retry can never charge twice.
- Webhooks count only after PayPal verifies their signature.