Key the business event

The idempotency key names the event (payments:pay_8812:received), not the HTTP request, and commits with the notification and its outbox row. A retry gets the original id; a reused key with different parameters gets 422.