POST /api/partners/verify-key
Request Body:
This request must be signed with your current private key — include the
Partner-App-Key, X-HSPay-Signature, and X-HSPay-Timestamp headers. Once the request succeeds, subsequent requests must be signed with the new private key.