Register (or replace) an https webhook that receives each notice as a signed POST.

The URL must be https on port 443 at a public host. Each POST carries x-tl-notice-signature: t=<unix seconds>,v1=<hex>: HMAC-SHA256 with the signing secret over <t>.<raw body>. Registering again rotates the secret.