transactional outbox

A fix for the dual-write problem: orders writes the event into an outbox table in the same transaction as the order, and a relay publishes it later.