Dependency-free Java SDK core: signs and submits Kenya PesaFlow / eCitizen PaymentAPI checkout payloads (including M-Pesa STK push), renders ready-to-use pay-button HTML, and verifies inbound webhook/IPN notification signatures with a timing-safe HMAC-SHA256 comparison. Zero runtime dependencies; Java 8+.