Handle Webhook

Handle Stripe webhook events.

This endpoint is called by Stripe when payment events occur. It must be unauthenticated but validates the webhook signature.