Support OAuth Client Credentials for webhooks

Problem
Webhook payloads are currently authenticated via HMAC signature, but some customers' security teams prefer OAuth Client Credentials authentication.

Request
Add OAuth Client Credentials as an authentication option for webhook payloads.