octopus-mcp-poc

The server uses established webhook middleware libraries (`@octokit/webhooks` and `gitlab-webhook-middleware`) which are designed to verify webhook signatures using provided secrets, mitigating common spoofing risks. The current code primarily logs payloads and does not contain `eval`, obfuscation, or direct use of user-controlled input in shell commands. Hardcoded secrets are avoided through the use of `dotenv`. The main security consideration would be if further, unprovided logic were to act upon the logged webhook payloads in an insecure manner.