internal-uploads
Scan Webhook
Receive a GuardDuty Malware Protection scan result for a user upload.
Returns 200 OK on success (including idempotent no-ops). On signature mismatch returns 401. On malformed payload returns 400.
Slice 2: signature verify + hand off to UploadService.record_scan_result, which transitions the row and (on NO_THREATS_FOUND) enqueues process_upload.
POST
Scan Webhook
Scan Webhook