Surfaces tell you when inbound webhooks are being rejected

When webhook deliveries fail verification before an execution starts, the affected channel can simply appear quiet. Webhook health makes those configuration problems visible.

Surfaces now carry webhook health, exposed on the surface API response and rendered in the dashboard.

• A banner appears only when deliveries are currently failing, with the reason and provider-specific guidance for common signing-secret and configuration issues.
• Health means "did anything fail since the last success", so a channel that rejected a few events during setup and has worked since reads as healthy instead of nagging you.