Developers that monetize payments can learn from the Federal Trade Commission's Toast lawsuit. Here's what to audit.