buildItemsMetadata(intent: CheckoutIntent): Promise<Record<string, string>>
Build checkout metadata from a CheckoutIntent (converts items to compact form).
Hashes the plain siteToken into site_token_index before storing so the
provider never sees a value that can be used at /renew.
intent: CheckoutIntent