Shared per-order token written on every row of one checkout (defaults to "" — legacy/parent-less bookings). Set once per create, not per caller.