Calls PayPro's GET /api/v1/payments/{bill_reference} with this school's own API secret — the independent backend confirmation, never trusting the browser/popup alone.
GET /api/v1/payments/{bill_reference}