Create a webhook deployment hardening checklist.
Cover:
- requiring
KAIROS_GITHUB_WEBHOOK_SECRET
- avoiding full payload logs
- validating event allowlists
- loop prevention with GitHub App installation id
- redacting Feishu ids and credentials in debugging output
This should link from README.md and SECURITY.md.
Create a webhook deployment hardening checklist.
Cover:
KAIROS_GITHUB_WEBHOOK_SECRETThis should link from
README.mdandSECURITY.md.