Limit webook address space?

[Yshayy]

We should consider adding some filtering to disallow creating a hook that invokes a local/internal http/s endpoint:
https://docs.gitlab.com/ee/security/webhooks.html
Also, might worth adding a Tweek internal configuration for only allowing https hooks. (or better, probably the default should be https only, and http can be enabled for local testing)