VIN server is running. Shopify POSTs paid orders to /webhooks/orders-paid; a browser cannot trigger it. /health answers ok.