Allow "redirect on declined" to target external URL

Working on it.

This MR fixes the handling of the decline URL.
Right now, the block always assumes the value is an internal path, which breaks when you try to use a full external URL. The change makes it detect http:// or https:// and use the link as-is, while keeping the current behavior for internal paths.

Please review.

Thanks