An ordered, replay-safe payment ledger

Payments are now applied through an immutable, ordered application ledger: every dollar has a line saying which charge it settled, corrections converge on replay, and a read-only projection feeds statements and reports.