webhook egress proxy — see /health for status