Mayo ASPM Webhooks

GitHub App ingress service. This host is not user-facing.

• POST /github/events — GitHub webhook receiver
• GET /api/health — health check
• /admin — operator UI (mTLS required)