A Cassazione ruling sharpens a quiet but critical question for digital business: when does a checkout click become valid consent, and when is it just a weak trace in the audit log?