Idempotency key: returns firstTime:true only once per key within ttl (dedupe retries/double-sends). Send { key, token, ttlSec? }.