CRB webhook diagnostics

Inbound events from Cross River Bank. Verified rows are eligible for orchestrator pickup; untrusted rows require ops review.