Merge pull request 'feat(security): allow access to webhook endpoint' (!128) from bugfix/deposit into main

Reviewed-on: #128
Reviewed-by: Jan K9f <jan@kjan.email>
Reviewed-by: Phan Huy Tran <ptran@noreply.localhost>
Reviewed-by: Jan-Marlon Leibl <jleibl@proton.me>

backend/src/main/java/de/szut/casino/security/SecurityConfig.java

@@ -23,7 +23,7 @@ public class SecurityConfig {
             .cors(Customizer.withDefaults())
             .csrf(csrf -> csrf.disable())
             .authorizeHttpRequests(auth -> {
-                auth.requestMatchers("/swagger/**", "/swagger-ui/**", "/health").permitAll()
+                auth.requestMatchers("/webhook", "/swagger/**", "/swagger-ui/**", "/health").permitAll()
                     .anyRequest().authenticated();
                 })
                 .oauth2ResourceServer(oauth2 -> oauth2.jwt(jwt ->