Short answer: a public HTTPS queue push webhook subscriber in Node. js should verify the signature on the raw request, persist a unique cleanup command, and ack only after that durable write; a bounded worker should own retries. The request should never wait for the marketplace cleanup itself.
Source: [Dev.to](https://dev.to/ethanbrooks111/marketplace-cleanup-queue-push-webhook-endpoint-with-public-https-signature-checks-471m)