Currently CircleCI requires write access to the org webhooks. Apache INFRA can't allow it.
Therefore adding some flexible management of permissions can solve this issue. And a bunch of Apache projects can enable usage of this CI. [1-6]
The other way is migrating for CircleCI from OAuth Apps to GitHub Apps (similar to TravisCI for opensource)