Verify GitHub webhook payload from hash

- Check for a variety of headers, includeing content-type & USer-Agent
- Verify payload hash against secret stored in config file