Webhook workers: upsert logic is suboptimal

[steebchen]

When adding a webhook worker with the same URL, it is upserted and the secret is overriden.
This was changed so that you can setup previously deleted webhook workers with the same URL again, but then the secret needs to be exposed, which should actually only happen once on creation and not when updating, except if the webhook worker was previously deleted and is now active again.