Idempotence for payment status endpoint

Payment processors may go a bit haywire and send us the confirmation multiple times, while it's already been verified and closed on their side. This will prevent any updates to an already finished transaction, but still perform the verification and send an email.