Implementation checklist

Capture raw body for signature verification.
Store events by requestId to prevent duplicates.
Acknowledge quickly (200 OK) and process asynchronously.
Monitor failures; webhook may be paused after consecutive errors.