Added signature validation for webhook events to Farcaster WP tonight. App key check is next, hoping to avoid a Neynar dependency (even though Neynar is great). https://github.com/davisshaver/farcaster-wp/blob/main/includes/class-signature-verifier.php