x402 merchant flow backed by AAP custody.

This demo merchant returns an x402 payment challenge for protected resources. A valid AAP escrow releases funds after merchant attestation; missing proof keeps the refund path deterministic.