verification

Fields the server needs to verify this payment (signature, order id, gateway refs). NOT for display — the orchestrator forwards these to PaymentBackend.verify only. The human-readable, secret-safe view is raw.