Handles Xendit payment webhook callbacks.

Xendit sends callbacks when payment status changes (paid, expired, failed, etc.).

Note: Xendit Payment Links webhooks don't require signature verification. For production, you can verify the callback comes from Xendit by checking the source IP or using webhook verification tokens if configured.