Update secret status and emit repo event to apps table

Your repository secret webhooks arrive without structured status, leaving app records stale and engineers unaware of test versus production readiness. Keep app records current for same-day releases.