Ses Events Webhook Endpoint

Bounce and complaint events from SES, delivered by SNS.

Open by necessity — SNS cannot carry a JWT — so the SNS signature is what authenticates it. A permanent bounce or a complaint suppresses that address for every future send.