Don't check for webhooks on non-production instances

I used to handle this in an extension, but since 6.5 changed the name of the check to something dynamic, I figured it was time to push this upstream.

When I get a moment I'll do the same on the Auth.net extension, which is a bit more pernicious since it creates the webhooks without asking.