Add ability for hook mapping transform modules to export a verifyAuth
function for custom authentication (e.g., GitHub HMAC signatures).
When a transform module exports verifyAuth, it runs BEFORE standard
token auth. This enables external webhook signature verification
(GitHub, Stripe, Linear, etc.).
Changes:
- hooks.ts: Add verifyAndParseWebhook() with custom/token auth paths
- hooks-mapping.ts: Add HookVerifyAuthContext type, loadVerifyAuth()
- server-http.ts: Use verifyAndParseWebhook() for cleaner auth flow
- webhook.md: Document verifyAuth with GitHub example
- Tests for verifyAndParseWebhook and loadVerifyAuth
920551ae70