Get callback signing secret

Returns the org's stable secret for verifying signed per-job callbacks (jobs submitted with callback.verify=true). Generated on first fetch, then stable until rotated. Verify a signed callback with the SDK's verifyWebhook(rawBody, headers, secret) — the scheme is identical.