API and webhooks

Create revocable credentials and receive HMAC-signed alert events. Secrets are shown once; API keys are stored only as hashes.