Allow message to be verified

## Feature: Non-repudiation for queue-worker callbacks

Suggested by: Ed Wilde @ewilde 

We can use HMAC or RSA and HMAC together to sign messages when we use the X-Callback-Url. This means that receivers of the callback messages can verify the sender as the queue worker vs. some bad actor that discovered the URL.
