Semgrep findings (POST-only side effects, dead webhook helpers, quotation lost reasons)

Makes fourteen whitelisted methods that send emails, enqueue jobs or commit POST-only, and removes dead webhook helpers.