List this account's webhook endpoints and delivery health without returning secrets.

Costs nothing quota-wise. Call after registration or when auditing delivery; minting or rotating a secret is a separate operation. Recover from invalid_key by replacing the API key. For rate_limited or service_unavailable, wait retry_after_sec and retry once; never infer endpoint deletion from a transient error.