b40a812f3a
Platega: handle verification ping POST without auth headers (empty body → 200 OK) CryptoBot: always use API token for signature verification per docs, not WEBHOOK_SECRET CryptoBot: reject requests without signature in both FastAPI and aiohttp handlers Remove dead self.webhook_secret from CryptoBotService Update tests to match new behavior