Add bounded async event processing with worker pool

[darthfork]

Summary

• add a bounded async webhook event queue and worker pool
• return fast webhook acknowledgements with explicit queue-full backpressure behavior
• expose queue depth, capacity, worker count, dropped events, processing failures, and processing latency metrics

Closes #43

Testing

• go test ./...
• make lint
• make security