Verified Slack slash-command endpoint: checks the X-Slack-Signature HMAC before logging the command to Postgres and replying with an ephemeral message.