Fix: buyers could get stuck on a dead payment link.
After repeated failed card attempts BML card-locks a payment link but leaves the transaction in QR_CODE_GENERATED, so the gateway kept redirecting retries back to the locked link instead of generating a new one. The gateway now reuses a link only briefly (to absorb an accidental double-submit) and mints a fresh link on a deliberate retry or after the buyer returns without paying.