Release MakePay Telegram bot starter

[jamesw383]

What changed

• Adds a Python 3.12/FastAPI Telegram shop bot that creates idempotent MakePay hosted checkouts.
• Authenticates Telegram webhooks and verifies timestamped MakePay HMAC signatures over the raw body.
• Persists orders, webhook deduplication, and a retryable notification outbox in SQLite.
• Reconciles non-terminal payments against MakePay to recover delayed or missed webhooks.
• Includes Docker deployment, a sample catalog, architecture and security documentation, and contributor guidance.
• Adds pinned GitHub Actions, CodeQL, Dependabot, package checks, and a container build.

Why

This provides a maintained, open-source MakePay equivalent to the reference Telegram crypto-payment demo, with the reliability and security controls required for a real integration starter.

Impact

Operators can clone the repository, configure Telegram and MakePay server-side credentials, edit the JSON catalog, and accept crypto through MakePay hosted checkout. Fulfillment remains explicitly merchant-owned and must run only after the local order reaches paid.

Validation

• 48 tests pass on Python 3.12.
• 86.25% branch-aware coverage.
• Ruff lint and format checks pass.
• Strict mypy passes.
• pip-audit reports no known vulnerabilities.
• Wheel build passes.
• actionlint passes for both workflows.
• Secret-pattern scan is clean.
• GitHub CI additionally builds the container and tests Python 3.12/3.13.

[github-advanced-security]

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

• The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
• Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
• You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.