webhook
statusUpdate
Sent to partner-result.update-url with the static bearer token you gave Refapp at provisioning. The host must be on the allow-list agreed with Refapp. Sent when the candidate is created, on every state change and on completion. Answer with any 2xx.
2XXReceived.