Webhooks

todo summarize https://github.com/standard-webhooks/standard-webhooks/blob/main/spec/standard-webhooks.md

Start thin, get fuller as necessary. 20kb max size.

HMAC for signing is pretty standard. This plus HTTPS to guarantee sender + integrity of payload. Treat pre shared keys like secrets duh.