- Separate webhook routes with different secrets - Add verifyConnectWebhookSignature() to StripeService - Add STRIPE_WEBHOOK_SECRET_CONNECT env var - Update vault with prod secrets for both endpoints Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>