Add Stripe webhook integration tests (signature + dedupe)

Commit notes

Mounts the real webhook route against live Redis: verifies correctly signed events are accepted, duplicate deliveries are acknowledged without reprocessing (with a TTL'd claim), and bad/missing signatures are rejected. Test setup provides dummy Stripe credentials (||=, real values win) since constructEvent verification is pure crypto.

[private session redacted]