Link OAuth provider in account settings. Connect repo to the project. Enable deploy-on-push if available. Webhook signature is verified; matching service…