Handle Webhook

Handle GitHub App webhook events.

Events:

• installation: created, deleted, suspend, unsuspend
• installation_repositories: added, removed

Security: Webhook signature is ALWAYS verified. If GITHUB_APP_WEBHOOK_SECRET is not configured, all requests are rejected.