#lifecycle

Adding webhooks turned my one-line disconnect into a teardown with an order

Wiring two issue trackers into my dev-metrics app got the handshake signed and the tokens into a vault, but disconnect now has to delete webhooks before the token that removes them, and the inbound event handlers still trust whoever calls.