The Apps Script sends a JSON body { "content": "..." } with an x-secret header. The bot verifies the secret, then uses the Discord bot token to post the message to the configured channel.