`Order` can be marked as paid without a `PaymentMethod` set

[odrotbohm]

While the constructor of Order taking a PaymentMethod rejects the parameter being null, nothing in Order makes sure that the method is non-null when ….markPaid() is invoked.