Creates a webhook given a URL and one or more events.

Registering a webhook is non-idempotent, i.e. you are responsible for not registering the same webhook multiple times.

The timeout for webhook requests is 60 seconds. Successful receipt requires a 2xx response code. Webhook delivery is retried up to 10 times if the request fails.

Use the returned webhook secret to verify the authenticity of received webhook events using HMAC-SHA256.