【后端接口】充值发货：订单验证与元宝到账

---支付回调的验证与发货
function Pay.callback(body)
    -- 验签：回调必须来自支付平台
    if not Pay.verifySign(body) then
        Ops.alert("回调验签失败", body.orderId)
        return false
    end
    -- 幂等：订单只发一次货
    if Pay.delivered(body.orderId) then
        return true
    end
    local player = getplayerbyname(body.roleName)
    if not player then
        Pay.pending(body)      -- 玩家不在线，转补单
        return true
    end
    sendmail(body.roleName, 8007, "充值到账",
        "感谢支持，" .. body.amount .. " 元宝已到账",
        "元宝|" .. body.amount)
    Pay.markDelivered(body.orderId)
    return true
end

---补单轮询：每 5 分钟扫未发货订单
setontimerex(85, 300)
function Pay.recover()
    local rows = Pay.pendingOrders()
    for _, o in ipairs(rows) do
        if o.tryCount >= 6 then
            Ops.alert("补单超限，转人工", o.orderId)
        else
            local player = getplayerbyname(o.roleName)
            if player then
                sendmail(o.roleName, 8008, "充值补发",
                    "延迟到账请查收", "元宝|" .. o.amount)
                Pay.markDelivered(o.orderId)
            end
        end
    end
end