Document HA best practices

[tnm]

cc @josh

[josh]

Would like to support --webhook-addr=false and --api-addr=false to selectively turn the server into one or the other. Maybe error if both are disabled.