Webhook events

{
  "id": "evt_9001",
  "type": "customer.created",
  "data": { "id": "cus_003" }
}

const signature = req.headers["x-signature"];
const expected = hmacSha256(secret, req.rawBody);
if (signature !== expected) return res.status(400).end();