Stripe webhook endpoint: POST /webhook