Webhook credentials do not prove subscription coverage
A configured webhook signing secret and healthy handler prove only that the receiver can authenticate deliveries. They do not prove the provider subscribed the endpoint to every event the feature needs. For event-selective providers, require either control-plane subscription rea…