Send signed outgoing webhooks

Fed by the records themselves, delivered only to public HTTPS addresses
checked at every attempt, retried, and switched off after repeated failures.
A submitter's details travel only to webhooks that opted into them.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

routes/api.php

@@ -38,6 +38,7 @@ use App\Http\Controllers\Api\V1\TechnologyController;
 use App\Http\Controllers\Api\V1\TestimonialController;
 use App\Http\Controllers\Api\V1\TokenController;
 use App\Http\Controllers\Api\V1\UserController;
+use App\Http\Controllers\Api\V1\WebhookController;
 use App\Support\AdminContent;
 use Illuminate\Support\Facades\Route;
 
@@ -260,6 +261,12 @@ Route::prefix('v1')->name('api.v1.')->group(function () {
             ->whereIn('resource', array_keys(AdminContent::WITH_HISTORY))
             ->name('import');
 
+        // Telling other systems what happened here.
+        Route::apiResource('webhooks', WebhookController::class);
+        Route::get('webhooks/{webhook}/deliveries', [WebhookController::class, 'deliveries'])->name('webhooks.deliveries');
+        Route::post('webhooks/{webhook}/ping', [WebhookController::class, 'ping'])->name('webhooks.ping');
+        Route::post('webhook-deliveries/{delivery}/redeliver', [WebhookController::class, 'redeliver'])->name('webhook-deliveries.redeliver');
+
         // The panel's health screen, and what is left to translate.
         Route::get('health', [HealthController::class, 'index'])->name('health');
         Route::get('translations/pending', [HealthController::class, 'translations'])->name('translations.pending');