Webhook integration

Configure SIEM or custom webhook endpoints in organization settings when enabled. Receivers should verify signatures (when configured), reject stale timestamps, and treat deliveries as at-least-once — use event IDs for idempotency.

Clients posting telemetry or gateway events should retry on 429/5xx with exponential backoff and a stable Idempotency-Key per logical event so duplicates do not create multiple rows.