Embedded in cloud, the balance a customer spends is the host's ledger.
The deposit watcher wrote only commerce's own row, so a confirmed USDC
or USDT deposit marked its intent succeeded and funded nothing. Credit
the ledger first, as cash, keyed on the on-chain event, the way the
card webhook does; a deposit seen again is funded if it was not.