Webhook source IP allowlist

All webhook deliveries come from a single static range:

5.60.65.64/26

Allowlist that range if your endpoint is behind IP filtering. This is unlikely to change, but if it ever does we'll give plenty of notice.