Constant-time compare for the optional publisher webhook secret.
Header or body secret from the caller.
True when configured secret matches.
Constant-time compare for the optional publisher webhook secret.