authenticate incoming slack requests w/ secret signing

[thomasin]

very if incoming slack requests passed to Handler are authentic
https://api.slack.com/interactivity/slash-commands#app_command_handling
secret signing docs: https://api.slack.com/authentication/verifying-requests-from-slack
maybe using https://github.com/slack-ruby/slack-ruby-client