Rotate the webhook signing secret

Generates a new secret. The previous secret stays valid for the rotation overlap window so in-flight deliveries are not lost.

curl -X POST "https://example.com/api/v2/webhooks/string/rotate-secret"

{  "success": true,  "secret": "string"}