curl -X PATCH \
  -H "Authorization: Bearer sk_workspace_test_..." \
  -H "Content-Type: application/json" \
  -d '{"events":["verification.completed","verification.failed"],"retryAttempts":3,"timeoutSeconds":10}' \
  "https://sandbox.api.hopae.com/connect/v1/apps/abc123/webhook-config"

{
  "url": "https://hooks.example.com/hopae",
  "enabled": true,
  "retryAttempts": 3,
  "timeoutSeconds": 10,
  "secret": "whsec_abc123def456ghi789jkl012mno345",
  "events": [
    "verification.created",
    "verification.user.authentication_started",
    "verification.completed",
    "verification.failed",
    "verification.session.timed_out",
    "verification.workflow.cancelled"
  ]
}