Add event-id idempotency to the Stripe webhook

Commit notes

Stripe retries deliveries, so the same event can arrive multiple times. Claim each event id in Redis (SET NX, 4-day TTL) after signature verification and acknowledge duplicates without reprocessing. Fails open on Redis errors; handler-level DB checks remain the backstop.

[private session redacted]