Refactor webhook listener into Class

Allow `app` to be set in constructor, in case of attaching to existing Express server
Sanitize POSTed params with whitelist before passing to shell script