Closes the highest-risk review findings: Stripe on-ramp idempotency, payout replay protection, stale protocol counters, and local gate drift.

Verified with ./stack/stateset gates: 216 contract tests and 41 bridge unit tests pass.