[api] support source update hook via token

can be used for example for a github.com service integration