Implementation checklist

  1. Capture raw body for signature verification.
  2. Store events by requestId to prevent duplicates.
  3. Acknowledge quickly (200 OK) and process asynchronously.
  4. Monitor failures; webhook may be paused after consecutive errors.