smolanalytics POSTs signed JSON here when an alert fires. Verify with the X-Smolanalytics-Signature header (HMAC-SHA256 of the body, using the secret).