v1.4.0 - Gateway fraud auto-block & history deduplication

Added

• Gateway fraud auto-detection. When a payment fails, order notes are scanned for fraud keywords (e.g. Gateway Rejected: fraud, risk_threshold). On first detection the customer IP is auto-blocked and a single BLOCKED event (score 999) is recorded. Keyword list is filterable via ccm_wd_fraud_patterns.

Fixed

• Duplicate History rows for the same order caused by repeated track_order_outcome calls on each pending-failed status flip.
• Blocked + Allowed inconsistency on Store API orders: cancelled/failed orders that were already blocked by GeoIP no longer get a second ALLOWED event.