Creates a new webhook subscription
monitors:read_write permission.
monitor.state_changed, monitor.created, monitor.updated, monitor.deleted.secret — this is only shown once. Use it to verify webhook payloads via the X-Larm-Signature header.