Fixture and replay workbench

Generate fake Lemon Squeezy webhook payloads and cURL replays.

Build a safe webhook fixture, HMAC `x-signature`, and local replay command from fake data. Everything runs in the browser and no provider API is called.