Sealfield read-only API and signed webhooks: authentication, endpoints, events, signature verification and retry rules.