Go web middleware

An x402 gate refuses a captured X-PAYMENT header only if it already wrote the key down

paygate402 hands signature recovery and settlement to the facilitator and keeps only a record of spent payments, so the whole replay defence of a machine-paid API is one write that has to land before the resource is served.