Verify integration points: OC webhook events (order.processed/new member), Cloudron user payload

README.md

@@ -77,8 +77,11 @@ endpoints:
 **Scaffold** — the three handlers are stubbed with the correct integration
 points. Remaining work before production:
 
-- [ ] Verify Open Collective webhook event names + payload shape
-- [ ] Verify Cloudron user-creation API payload (role/group assignment)
+- [x] Verify Open Collective webhook event names + payload shape
+      → `order.processed` (every payment), `new member` (first only), `firstPayment` flag
+- [x] Verify Cloudron user-creation API payload (role/group assignment)
+      → `POST /api/v1/users` with `{username, email, displayName, role, active}`
 - [ ] Add a persistent store (SQLite/Postgres) for email→key mapping
 - [ ] Add HMAC signature verification for the OC webhook
 - [ ] Wire the OIDC addon for admin access
+- [ ] Verify LiteLLM key/generate + key/list payload shapes against live gateway