Short answer: a public HTTPS queue push webhook subscriber in Node.js should verify the signature on the raw request, persist a unique cleanup command, and ack only after that durable write; a bounded worker should own retries. The request should never wait for the marketplace cleanup itself. That sounds almost too conservative. It is exactly what makes a delayed task boring to operate. A marketplace can tolerate a cleanup running a few minutes late; it can't easily tolerate deleting a listin...