Webhooks and idempotency for partners

Partner backends must tolerate retries. HMAC, delivery journal and action idempotency keys are the minimum for a calm SLA.