API: Webhooks upgrade with event filtering, Test button, auto-disable, delivery log

Webhooks now let you subscribe per-event instead of firing on everything. Each endpoint has a Test button that posts a synthetic payload and shows the response. Endpoints auto-disable after 5 consecutive failures so a broken URL cannot clog the queue, and every delivery attempt is logged with status code, response time and User-Agent for triage.