Mutation.storefrontConfirmVnpayOrder

Confirm a VNPay payment from the return-url params. Server re-verifies the HMAC-SHA512 signature + amount (never trusts the client) then flips the order to processing/paid. Idempotent with the server IPN.

Signature