Block SSRF via customer webhook endpoints

Webhook endpoints can execute requests from the Press control plane; three validation gaps allowed URLs pointing to private IP ranges and loopback addresses to bypass checks.