Add cooldown to Save Code Now requests from webhooks

Currently, we accept all requests from whitelisted domain, even if there is a SCN request in progress, or a very recent one. For example:

I think it would make sense to at least reject new requests while a loader is working (or return the existing request instead of creating a new one, to avoid disrupting clients?)