Validated webhook intake with duplicate protection (demo)

Python/SQLite demo checked with 11 HTTP request cases: valid events save once; repeat submissions, conflicts and invalid requests have clear responses.