Port: 9001 (public) - Called by Auth0 when a user verifies their email.
This endpoint is triggered when a user clicks the email verification link. It activates the user account by setting their status to ACTIVE.
Authentication: Secured with Auth0 webhook secret via custom header.
Important: Always returns 200 OK to prevent Auth0 from retrying, even on errors.
Auth0 webhook secret for authenticating webhook requests. For local development only, use 'dev-bypass' to skip authentication.
Webhook received and processed (or acknowledged with error logged)