Handle Provider Webhook

Receive an incoming webhook event from a provider.

Body bytes are pre-read by the async _read_body dependency so that signature verification has access to the exact bytes signed by the provider. The route itself is a plain def so FastAPI runs it in a threadpool, keeping synchronous DB work off the event loop.

Returns whatever dict the provider's dispatch() method returns.