Authenticate webhook payloads by OAuth Client credentials, rather than HMAC signature

Our security team has a preference for having webhook payloads sent authenticated with OAuth Client Credentials, rather than being signed by an HMAC signature.