12.40Idempotent Salesforce write + non-idempotent notification
Possible fix:
customerCreated event
with unique event ID
Email consumer:
dedupe event
Or store:
Welcome_Email_Sent__c
depending on business design.
Don't assume one idempotent step makes the whole workflow idempotent.