v1.1.0

New payment methods and webhook security.

• Added QRIS and Virtual Account as payment methods, alongside card and e-wallet
• Webhook payloads are now signed; verify the X-Apipay-Signature header before trusting an event
• POST /payments/{paymentId}/cancel lets you cancel a payment that’s still pending