Add local webhook test script

[Veri5ied]

Create a script to send a signed webhook payload to /webhook to test locally without GitHub.

Acceptance criteria

• Script reads GITHUB_WEBHOOK_SECRET.
• Allows specifying repo/PR number and action.
• Prints response status.