What it does: Gives a flow its own endpoint at /wp-json/flowforge/v1/webhook//. Notes:

• HMAC-verified, rate-limited per IP, and de-duplicated on a unique event hash so a retrying sender cannot double-run the flow.