Scribble — handwritten cards API (scribblecards.com)

### App
Scribble — handwritten cards API (scribblecards.com)
https://documenter.getpostman.com/view/58048488/2sBYAxPpV3

### Sources
New Card Event (Instant): receive signed Scribble webhook events for card.created, card.written, card.mailed, card.held and card.cancelled. The prepared source creates and removes its subscription with POST /api/v1/webhooks and DELETE /api/v1/webhooks/{id}; it requires webhooks:manage, verifies the raw-body HMAC and timestamp, and deduplicates events. A fictional sample supports field mapping without creating physical mail. Webhook documentation: https://scribblecards.com/docs/api/webhooks

### Actions
Send a handwritten card: POST https://scribblecards.com/api/v1/cards with a US postal recipient and a finished message of up to 500 characters. Supports handwriting, design, arrival window and reference, with a stable Idempotency-Key for an identical retry within 24 hours. Requires cards:send. An accepted, unheld card uses one credit; a held card is not charged and is not a completed send. We have prepared a connector-only ES module contribution for this action and the webhook source, checked with the official lint configuration and 12 offline tests. Hosted runtime validation and maintainer review remain outstanding; components have not been published.

Managed authentication requested: proposed app slug scribble, required secret field api_key, Authorization: Bearer . Customers create scoped API keys at https://scribblecards.com/app/integrations. Read-only connection check: GET https://scribblecards.com/api/v1/me; any valid scoped key, no credit use. Account label can use organization.name and key.name. This API does not require an OAuth client or redirect URI. API authentication: https://scribblecards.com/docs/api/authentication.

No credentials are included here. Please confirm the app registration and a private process for an authorized reviewer account. Do not run paid or physical-card tests until separately arranged.

Start by reviewing the prepared connector-only ES module, then run the official lint configuration and its 12 offline tests. Done means the Scribble card action and webhook source pass those checks, with app registration, authorized hosted-runtime validation, and maintainer review completed; do not run paid or physical-card tests without separate approval.

Written by the indexing model from the issue text.