Safe Actions: Idempotency, Retries, and Authorization