Handle Vapi Webhook

Handle incoming webhook events from Vapi.

Vapi sends events to this endpoint for call lifecycle updates. Key events handled:

• status-update (in-progress): Creates a new call record when the call starts
• end-of-call-report: Updates call with transcript, triggers recording pipeline

Authentication is via x-vapi-secret header (configured in Vapi dashboard).