Trustworthy, bounded detection on Cloudflare

A focused maintenance release covering patched dependencies, authenticated event ownership and proof correlation, bounded service usage, and observable webhook delivery. New detection types are deferred until the receiver is reliable and staging-qualified.