Fixing broken payment gateways

Verify API keys, allowed origins, and webhook endpoints. Check gateway status pages for incidents and rotate credentials if compromised.