Deprecated. Optional legacy token echoed back in the x-api-key header of every delivery, for receivers built before signing existed. It travels in plaintext, so it proves nothing about authenticity: it may accompany signingSecret but cannot replace it.