Add a function for validating payloads from GitHub webhooks

Given a GitHub secret, a payload and the signature delivered with the
payload in `X-Hub-Signature`, verifies if the signature is valid or not.
See issue #76.

----

I wasn't sure what sample would you prefer for this, if any, as a working sample needs some kind of a web server. I could provide a sample application with [scotty](https://hackage.haskell.org/package/scotty) (around 20 lines of code), but it won't work without additional dependencies.
Makes sense, I'll rebase the patch.