Agent webhooks

Same HMAC scheme as merchant webhooks (X-Bruce-Signature).

Configure webhookUrl on the agent. Audit events are always written to D1 even if delivery fails.

See Public API webhooks for signature verification.