Server: Get the HEAD SHA from the webhook instead of from the API

Fixes gh-4