Where checkout keys belong: browser, shop backend, and payouts

A checkout integration needs credentials with different exposure rules. The browser needs enough access to open checkout; your server needs to create invoices; the process handling withdrawals needs a