Webhook as Wake-Up, Not as Truth — relaying platform events into CI without trusting them

Polling gets throttled and push payloads are unsigned. Forward the interrupt, not the claim, and both problems stop mattering at once.