Replace the set of events a webhook is subscribed to. The destination URL is fixed at creation — sending a different url is rejected with 400, so create a new webhook instead. At least one valid event name is required. Returns 204 with no body on success.