Alerts via web hooks

Alerts can now POST a JSON payload to a user-configured URL with Bearer token auth; restricted to publicly routable addresses (https only, checked at socket open, no redirects/proxies).