Receives employee.created / employee.deleted webhooks from Rippling.

Authenticated via a pre-shared Bearer token (no Django session). Dispatches a background task that resolves the Rippling company to an ErpConnection and syncs UserCompany provisioning.