Parse and verify webhook payload
Raw request body
Signature from X-Contio-Signature header
Parsed webhook event or null if invalid
Verify webhook signature using HMAC-SHA256
Raw request body (string or Buffer)
Verification result
Parse and verify webhook payload