Webhook Handler

Verify HMAC-SHA256 signatures, parse delivery receipts, and respond to inbound events — a production-ready Express / Flask handler included.