Urgent Shopify GDPR Compliance Fix

❌ Provides mandatory compliance webhooks
❌ Verifies webhooks with HMAC signatures

✅ Auth flow & TLS certificate already pass
✅ Backend is Spring Boot (Java 21)
✅ Webhook routes already exist under /api/shopify/webhooks/**

We need a Shopify expert who can immediately:
• Implement and verify GDPR webhooks:
• customers/data_request
• customers/redact
• shop/redact
• Add/confirm correct HMAC-SHA256 verification (X-Shopify-Hmac-Sha256 header)
• Ensure Shopify’s automated compliance test passes ✅

The app backend is already set up (you’ll have full access).
This is a small but urgent fix — must be completed today.

Tech stack: Java Spring Boot, Shopify REST API, Webhooks, HMAC validation.