Update a webhook configuration

Replaces mutable webhook configuration fields. `name` and `url` are required. Omitted secret and headers are cleared; omitted isActive preserves the current status. Enabling requires a successful test of the same configuration within 15 minutes.