Webhooks without trusting the checkout redirect

A customer can close the tab after paying. A replayed Slack event can arrive twice. Those are not edge cases; they are the job.

CanWeChat records provider event IDs, verifies signatures with Web Crypto, and only then writes entitlement or messages. Redirects are a courtesy, not a source of truth.