Register, test, and remove outbound webhook endpoints. The signing secret is returned once, at creation.