How to ensure fault tolerance in a microservice scenario: order is placed, payment is completed, and the next step — reducing the balance or notification — fails?