Webhooks now come from a fixed set of source IPs
Webhook deliveries now come from a small, fixed set of static IP addresses
instead of a changing range, so they can be allowlisted on a firewall or
ingress. Each delivery also carries a new x-client-id header holding your
client app id.