Webhook integration

Configure SIEM or custom webhook endpoints in organization settings when enabled. When a signing secret is set, each delivery carries an X-Intertrace-Signature header; receivers should verify it and treat deliveries as at-least-once, using event IDs for idempotency. Webhook URLs and secrets are stored encrypted.

Clients posting telemetry or gateway events should retry on 429/5xx with exponential backoff and a stable Idempotency-Key per logical event so duplicates do not create multiple rows.