Checkout architecture surface.

No live payment code or payment secrets are included. Future checkout must be handled by a secure backend.