Idempotency-Key in practice: retrying POSTs safely, deduping concurrent requests, and documenting it in OpenAPI

A payment call times out after the server already committed the charge. The client, doing exactly what every reliability guide tells it to do, retries the POST. Now there are two charges. The problem