Webhook processing should require a secret from the sender

[cpolcyn]

For security we should set a webhook secret as an environment variable and provide that secret key to easyDITA to send in their webhook.