Persist inbound events before processing, dedup on event_id

Inbound Atlas events now durably persisted before handling, with unique constraint on event_id for race-safe dedup of retried deliveries.