Idempotency keys

chain-watch moves the exactly-once decision from the broker to the deposit watcher

Queue deduplication can only match ids the producer already computed, and a chain re-presents the same transfer on every overlapping poll, so the fix is an identity on the payment plus state that proves it.