Signed outbound webhooks, API keys, and OpenAPI documentation.
Swagger UI at /api/docs when the API is running.