b4ef52caa4
All payment providers now use lock_user_for_update before balance mutations and commit=False pattern for atomic payment status + fulfillment. Tribute service refund also uses proper locking.