Webhooks are fire-and-forget, cannot make auth decisions

[dborovcanin]

GenericNotifier in broker/webhook/notifier.go is strictly asynchronous fire-and-forget. Events are enqueued and delivered by a worker pool with no response handling. There is no request-response webhook mode, so external systems cannot allow/deny operations via webhooks.