Write — generates a new signing secret for the endpoint. The new secret is returned once in this response; store it immediately. The previous secret stays valid for a 24h grace window (each event is signed with BOTH secrets) so you can swap without missing events; data.previous_secret_valid_until is when the old one stops. Requires the webhooks.write scope.