Updating the GraphQL schema for meta.sr.ht to introduce fine-grained access controls for clients and webhooks:

https://paste.sr.ht/~sircmpwn/1f43f6543b3a5a97ec69c193bab4a7f98b936294

Feedback desired.

One novel advantage of the webhook approach I've used here is that the client registering the webhook can specify an arbitrary GraphQL query which is executed to build the webhook request body. This means that you can configure the webhook payload to include any additional information you'll need, which will save you from having to make any additional API requests to finish processing the webhook.