Most webhooks I've worked have this limitation. If you want to go the webhook route what I've done in the past is a serverless function as middleware that proxies the webhook and adds headers as required