test(crypto): cover uppercase hex in timingSafeEqualHex

Lock in case-insensitive hex parsing used by webhook signature verification.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: 2 people

test/unit/crypto.test.ts

@@ -27,6 +27,7 @@ describe("webhook signature verification", () => {
     expect(timingSafeEqualHex("", "00")).toBe(false);
     expect(timingSafeEqualHex("00", "01")).toBe(false);
     expect(timingSafeEqualHex("00", "00")).toBe(true);
+    expect(timingSafeEqualHex("ABCD", "abcd")).toBe(true);
   });
 
   it("uses timing-safe token comparisons and one-way token hashes", async () => {