fix(palm): add JwtRestrictedApplication check to XBlock callback

[Agrendalath]

This backports GHSA-qx8m-mqx3-j9fm.

[openedx-webhooks]

Thanks for the pull request, @Agrendalath! Please note that it may take us up to several weeks or months to complete a review and merge your PR.

Feel free to add as much of the following information to the ticket as you can:

• supporting documentation
• Open edX discussion forum threads
• timeline information ("this must be merged by XX date", and why that is)
• partner information ("this is a course on edx.org")
• any other information that can help Product understand the context for the PR

All technical communication about the code itself will be done via the GitHub pull request interface. As a reminder, our process documentation is here.

Please let us know once your PR is ready for our review and all tests are green.

[feanil]

It looks like this failure is consistent though I'm not sure what it has to do with the code that was changed. @Agrendalath I think you'll have to look deeper to figure out what's going on.

[Agrendalath]

@feanil, I cherry-picked the test fix from #33995.

[openedx-webhooks]

@Agrendalath 🎉 Your pull request was merged! Please take a moment to answer a two question survey so we can improve your experience in the future.