Stripe Webhook

Receive a Stripe webhook.

Unauthenticated by necessity — Stripe has no credential to present — so the HMAC signature over the raw body IS the authentication, and it is verified before the payload is parsed, let alone acted on.

Always answers 200 once the signature checks out, including for events we do not handle and for a subscription we cannot resolve to a team. A non-2xx makes Stripe retry for three days and eventually disable the endpoint; neither an unknown event type nor an orphaned customer is fixed by redelivery, and both are already in the log.