Add hmac verification on ipn

[joyet-simon]

Reason for change

Linear task

Need to implement the verification of HMAC signature on IPN.

Code changes

• Add a securityHelper to call php-client's function to check HMAC signature.
• Call this helper in the PaymentHelper.
• Add some unit tests.

How to test

As a reviewer, you are encouraged to test the PR locally.

You can run unit test locally.

QA ENV

Create a payment and check on Datadog if the log of IPN is ok.
You can try to use Postman to call the IPN url with no signature and bad signature and check the error message.

Checklist for authors and reviewers

• The title of the PR uses business wording, not technical jargon, for the changelog readers to understand it
• The PR implements the changes asked in the referenced task / issue
• The automated tests are compliant with the testing strategy
• The tests are relevant, and cover the corner/error cases, not only the happy path
• You understand the impact of this PR on existing code/features
• The changes include adequate logging and Datadog traces
• Documentation is updated (API, developer documentation, ADR, Notion...)

Non applicable

[github-actions]

⏳E2E tests are currently running.
➡️ You can follow their progression here.

[sonarcloud]

Quality Gate passed

Issues
1 New issue
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud