For a Daily pinless inbound number, secure the room-creation webhook before making it
For a Daily pinless inbound number, secure the room-creation webhook before making it public: verify Daily's timestamped HMAC on the exact JSON body, answer the signed configuration probe without creating a room or bot, and fail closed when the secret is missing. A public webhook…