Nodera webhook receiver (A9 staging verification sink).

POST-only endpoint: /api/webhook-sink