Provider notification endpoint

Verified with the provider's own signature scheme. An accepted event queues a pull for every active connection of the provider user, or, for a notice a pull cannot fetch back (a deleted record), is stored as a raw object for each of them and queued for the ETL, which removes the record. A notice that cannot be stored is 500, so the provider retries.