Remove inbound request signature verification (closes #279)

internal/handlers/event_resubmit.go

@@ -84,10 +84,6 @@ const resubmitColumns = "id, entrypoint_id, method, headers, " +
 // is the stored EVENT. The response bodies and headers the original
 // deliveries received stay where they are.
 //
-// Inbound signature verification is deliberately not re-run. There is
-// no inbound signature to check on a copy the operator submits; the
-// route is authenticated and CSRF-protected as an operator action.
-//
 // Resubmitting the same event repeatedly is supported and is the point
 // of the feature, so replay's in-flight refusal is deliberately not
 // applied here. The route's rate limit is what bounds a held-down