the flipped signature order between subscriptions and orders is the kind of thing worth a unit test with a fixture for each payload, since it only fails in production when a real webhook arrives. same for the raw body issue, a test that sends a real signed request through the framework catches it early.