Auto-reconciliation via webhook

Razorpay webhooks land on our public endpoint, are signature-verified, and mark the invoice paid. No manual reconciliation.