GCP

Used for webhook ingestion (Cloud Run + Cloud Armor) and GCS partner delivery.

TODO

Document Pulumi stack names, Cloud Armor CEL rules, GCS IAM conventions, and HMAC key lifecycle.