server: add @private directive glue code

webhooks: initial prototype for GQL-native webhooks

Fix bug with internal authentication

Make authorization errors more specific

Import GQL server interfaces from gql.sr.ht