* fix: require Feishu webhook authentication
* fix: handle Feishu v2 webhook token auth
* fix: skip empty verification token write, consistent with app_id/app_secret
Address zmanian review nit #4: only write verification_token to workspace
when present, matching the if-let pattern used for app_id and app_secret.
Functionally identical (the auth check filters empty strings), but
consistent.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
30db07c58e