GitHub is updating from sha1 to sha256 and pushing to use new X-Hub-Signature-256 headers.

The class XHubSignature validated with sha1 the X-Hub-Signature.

Plan is to keep that class, but add a new XHubSignature256 class.

Reference: https://docs.github.com/en/webhooks/using-webhooks/validating-webhook-deliveries