Receives JSON data from integration partners (e.g. Repediu, Saipos). Authenticates via per-company API key (X-API-Key header), persists to WebhookEvent, and dispatches async processing. Idempotent — duplicate payloads return 200 with status ‘duplicate’.
API key for partner access via APISIX key-auth plugin
Per-company API key for this integration partner
Integration partner slug (e.g. 'repediu', 'saipos')
Partner-specific JSON payload