A production-only 500 error should be checked against config, data shape, permissions, and runtime differences before rewriting the route.
Local tests prove on…
When webhook signature verification fails only in production, compare the raw request path before changing the secret.
The secret is the obvious suspect, but p…