Cross-tenant list of failed webhook deliveries (admin)

Surfaces deliveries that exhausted the worker retry schedule (status=failed). Newest-first by the most-recent failure signal (delivered_at, falling back to created_at). Hard-capped at 500 rows per call. Sortable: createdAt, attempts. Default sort: -createdAt.