Lead ingestion pipeline

Broker webhooks → validated, deduped, persisted. Phase 1.