Register a webhook subscription for CRO dispatch events

Steps

1. POST to the hooks endpoint with a bearer token and x-tenant-id header.
2. In the JSON body, specify an events array using one or more supported types: Ping, Customer, CustomerLocation, Job, Truck.
3. Include a reachable callback url and, optionally, a base64-encoded secret for HMAC signing of payloads.
4. Store the returned webhook id so you can update, ping, or delete the hook later.
5. Verify incoming webhook payload signatures using the secret you supplied once your callback starts receiving events.