- Added optional boolean payment_method.data.trusted_vault_origin to credit‑card payment and verification requests
- When true, apps should accept missing CVV; false or absent preserves existing CVV handling
- Available in API version 2027‑01 release candidate, requires Shopify enablement and testing but no immediate production migration