Get webhook secret

Returns the organization webhook signing secret used to verify Sync-Signature headers on generation and batch webhooks. Sync signs the raw JSON request body as HMAC-SHA256 over <timestamp>.<rawBody> and sends it as Sync-Signature: t=<unix>,v1=<hex_digest>. Store the full whsec_... value securely and use masked=true only for display.