Spike Webhooks API
Outbound webhook event delivery. After data updates, Spike POSTs a JSON array of events - record_change, provider_integration_created, and provider_integration_deleted - to a webhook URL configured in the admin console, HMAC-SHA256 signed via the X-Body-Signature header, with retries (up to 10) on non-200 responses. Delivery is outbound HTTP only; there is no public WebSocket or SSE surface.