SslFailClosedWebViewClient
SECURITY: SSL/certificate errors on a hosted checkout page fail closed. compose-webview-multiplatform's AccompanistWebViewClient does not override onReceivedSslError at all, so without this subclass the platform default (handler.cancel()) silently cancels the load with no signal to the payment flow — the WebView would just sit blank. This override makes the failure explicit and reports it through onSslError so the orchestrator can settle the payment as com.siddharth.kmp.paymentsapi.PaymentResult.Failure.
NEVER call handler.proceed() here — that is the exact "flaky regional cert" hack Play policy rejects.
Android-only (android.webkit.* types) — lives in androidMain, never commonMain. Constructed only through sslFailClosedWebViewParams's android actual, which is the fix for the iOS-RED bug this class used to cause when it sat directly in commonMain.