Make Your Config Fail Loudly at Startup

Few bugs are as annoying as the one that shows up three hours after a deploy, when the first request finally touches the code path that reads PAYMENT_WEBHOOK_SECRET, and it turns out nobody set it in