Variable worldlineOnboardingConst

Declarative onboarding metadata for the Worldline Direct adapter pair: the credentials a host collects, the provider event-type strings a host subscribes to, and the CSP hosts the Hosted Tokenization iframe touches. The credential keys mirror WorldlineServerAdapterConfig. The event list is the DOCUMENTED payment/refund set only — webhook.ts's EVENT_TYPE_MAP additionally tolerates a few undocumented variants, but this descriptor drives host subscription lists and must not present those as provider behavior. The documented terminal refund signal is payment.refunded; there is no dedicated refund-failure event. Following Worldline's Statuses reference, a payment.rejected carrying status code 73/83 reports a refused deletion or refund and is parsed as payment.refund_failed; that reading is not yet sandbox-verified, and polling retrieveRefund observes the refusal too.

There is no client-scope credential: the Hosted Tokenization iframe is addressed entirely by the hostedTokenizationUrl the server session returns, so the browser holds no Worldline key.