Run webhooks with the owner's rules again

The owner sets a webhook up and its URL is a secret, and a webhook run
already refuses every action that needs approval, so holding it to the
API write allowlist only broke the owner's own automations. Webhook runs
no longer count as external callers; schedules keep their caller rules.
The allowlist copy no longer names webhooks.

docsgpt/agents/tool_executor.py

@@ -1171,7 +1171,7 @@ class ToolExecutor:
                 entry = f"{tool_data.get('id') or tool_id}:{action_name}"
                 if entry in self.api_write_allowlist:
                     return None
-                route = "for API, widget or webhook callers" if self.external_caller else "from its public link"
+                route = "for API or widget callers" if self.external_caller else "from its public link"
                 target = (
                     f"the owner's {resolved.connector_name} account"
                     if resolved is not None and resolved.connector_name