As far as I can tell, there is no way to have a single "deploy hook" that spans both builds and updates.
My understanding is that EAS Builds have both standalone webhooks as well as postPublish hooks. EAS Updates have neither.
This would be extremely useful for, say, tagging git release commits upon successful publishing