Scramble the webhook secret in the settings UI

[asaphko]

When updating an existing webhook configuration, the secret is shown as plain text.
For security reasons, we should display the secret as scrambled (***) and add an option to click a button to view the plain text version.