Creates a new webhook endpoint to receive real-time event notifications from the Elios Fund platform.

Business Context:
Webhooks enable seamless integration between Elios Fund and your business systems
by automatically notifying your applications when important events occur.

Integration Benefits:

• Real-Time Updates: Immediate notification of status changes
• Automated Workflows: Trigger business processes on events
• Data Synchronization: Keep external systems in sync
• Customer Communications: Enable timely customer notifications
• Business Intelligence: Feed events into analytics systems

Required Configuration:

• Endpoint URL: Your HTTPS endpoint that will receive webhook calls
• HTTP Method: POST or PUT for webhook delivery method
• Event Subscriptions: Specific events you want to receive
• Description: Human-readable description for management

Supported Events:

• Application Events: application.approved, application.declined, application.submitted
• Project Events: project.created, project.updated, project.completed
• User Events: user.created, user.updated
• Action Item Events: action_item.created, action_item.completed

Security Options:

• Webhook Secret: Shared secret for HMAC signature validation
• SSL Configuration: Custom CA, client certificates for enhanced security
• Authentication: Bearer tokens, API keys, or custom headers

Webhook Payload Format:
All webhooks send JSON payloads with event metadata including:

• Event type and timestamp
• Resource identifiers and current status
• Related entity information
• Partner context and scope

Best Practices:

• HTTPS Only: All webhook URLs must use HTTPS for security
• Idempotency: Design endpoints to handle duplicate deliveries
• Response Codes: Return 2xx status codes for successful processing
• Timeouts: Respond within 10 seconds to avoid retries
• Error Handling: Log failures and implement retry logic

Webhook Delivery:

• Retry Logic: Failed deliveries are retried with exponential backoff
• Status Monitoring: Track delivery success rates and failures
• Filtering: Only subscribed events are delivered to each webhook
• Rate Limiting: Respect webhook endpoint rate limits

Testing Integration:

• Development: Test with sandbox events before production
• Validation: Verify signature validation and payload parsing
• Error Scenarios: Test failure handling and retry logic
• Load Testing: Ensure endpoints handle expected event volumes