Order created 'pending' before payment, no hold-expiry → stale orders/holds

Orders sit pending before payment with no hold expiry, leaving stale orders and locked seats.

Checkout.php:388