Dedicated webhook endpoints at webhooks.johngirard.com — bypasses Vercel Protection to accept external service webhooks (Linear, etc.).