secret field, if provided, is used to sign every delivery with HMAC-SHA256. See Verifying signatures.
The secret is returned once on the create response and stripped from all subsequent list/get responses. Store it immediately.
Maximum 10 webhooks per workspace.
See Webhooks for the full delivery contract, event types, retry policy, and verification code.