Set visitor do-not-process flag from opt-out webhook events

Opt-out webhooks arrive without privacy flags, so analytics and targeting may still include opted-out users. Flagging visitors stops processing and keeps reports accurate within minutes.