Verify Mailgun event signatures (backport #7815)

Backport of #7815 to the release branch, with the same post-deploy signing key step.