Verify the signature of the webhook. The secret for signatures should be received from an ENV variable. Create a function that takes a webhook and the secret and returns false if the signature is not valid.