The WebhookSubscription GraphQL object now has a privateMetafieldNamespaces field. You can use this field to specify private metafields that you want to be included in the payload for events sent by that webhook subscription.
This is a companion discussion topic for the original entry at https://shopify.dev/changelog/specify-private-metafields-for-webhooks-using-graphql-admin-api