Webhook events

Subscribe a webhook endpoint to receive these events. Each delivery carries an X-PIE-Event header naming the event and an X-PIE-Signature-256 header of the form sha256=<hmac> — an HMAC-SHA256 of the raw request body keyed by your subscription secret. Verify the signature on every delivery before trusting the payload; compute the same HMAC over the raw body and compare in constant time. Delivery is at-least-once — dedupe on the delivery id.

Event	Group	Fires when
`product.published`	Product	A product version was published (or re-published) by its producing org.
`product.archived`	Product	A product was archived (soft-deleted) by its producing org.
`grant.created`	Grant	A data-access grant was created; delivered to both the granting PIP and the receiving PIC. `scope` is `all` or `selection` — since P6-SPEC-20 PR-3a a grant created with the legacy `scope: product\|category` is emitted as `selection`; `scopeItems` lists what it covers, and the deprecated `scopeId` names the one item of a single-item selection (else null).
`grant.scope_changed`	Grant	A grant now covers different products or categories; delivered to both sides of the relationship. `scopeItems` is always the FULL set the grant now covers (replace, do not merge); `scope` and the deprecated `scopeId` as for `grant.created`.
`grant.revoked`	Grant	A data-access grant was revoked; delivered to both sides of the relationship.
`sync.completed`	Sync	A daily catalogue sync finished for the org.
`workflow.transitioned`	Workflow	An approval-workflow instance moved to a new state.
`workflow.task_assigned`	Workflow	A workflow task was assigned (or reassigned) to a reviewer.
`workflow.task_overdue`	Workflow	A workflow task passed its SLA due time and the assignee was reminded.
`webhook.test`	Webhook	A test ping, sent on demand from the webhook settings ("Send test") to that one subscription only, whatever events it subscribes to.
`workflow.task_escalated`	Workflow	An overdue workflow task was escalated to the policy role after the grace window.