feature(security): adds events around site secret regeneration

Site owners can regenerate a new site secret. This allows plugins to
be notified of this change or to prevent it.

Fixes #6252