Cancel an in-flight webhook delivery (admin)

Flips a pending delivery to 'failed' so the WebhookDeliveryWorker stops retrying it. Stamps the response body with an ops cancellation note so downstream auditors can see why retries terminated. Returns 400 if the row isn't currently in 'pending' (use /retry on failed rows instead). Audit-logged as `admin.webhook-delivery.cancel`.