Expand description
Webhook subscription management + the event-type taxonomy.
Subscriptions are the generic external-delivery surface that supersedes the single-URL alerting
webhook: the background engine (crate::services::webhooks) delivers events to each enabled
subscription with HMAC signing and at-least-once retry. Listings + the delivery log are readable by
any authenticated principal (can_view); create/update/delete/test are gated by manager+
(can_manage_registry) and written to the immutable audit log. The signing secret is MASKED on
read (surfaced only as has_secret) and never echoed back.