RIFT tracker API (https://api.brighterworks.nl)

Changes the affiliate tracker behind a site's cloaked links (/go/... paths). The buttons on the site keep
linking to /go/...; visitors and search engines never see the tracker URL. A change is live within about
a minute on all visitors.

Authentication: every request needs the header
  Authorization: Bearer rk_...      (your key; keep it secret, ask for a new one if it leaks)

Rules
- path: a cloaked path, e.g. /go/register, /go/login, /de/go/register (language folder), or /go/* for a fallback
- url: https, on an allowed tracker host (go.spinwise.partners, track.greenfairysaffs.com, ...), with tracking
  (bta, btag, affid, utm_campaign ...). Other hosts are refused; ask the admin to add one.
- At most 600 changes per hour. Every change is logged and can be undone.

Endpoints
GET    /v1/sites?q=casino                  live sites (optionally filtered)
GET    /v1/sites/{domain}/links            current cloaked links: path, url, source (site = from the site,
                                           override = set through this API)
PUT    /v1/sites/{domain}/links            add or replace one link:   {"path": "/go/register", "url": "https://..."}
                                           or several:                {"links": [{"path": "...", "url": "..."}]}
DELETE /v1/sites/{domain}/links?path=/go/register
                                           remove an override (the site's own link applies again)
PUT    /v1/links                           bulk, several sites:       {"links": [{"domain": "...", "path": "...", "url": "..."}]} (max 500)
GET    /v1/changes?domain=&limit=          change history (newest first)
POST   /v1/changes/{id}/undo               undo one change

Example
curl -X PUT https://api.brighterworks.nl/v1/sites/casooola.org/links \
  -H "Authorization: Bearer rk_..." -H "Content-Type: application/json" \
  -d '{"path": "/go/register", "url": "https://go.spinwise.partners/visit/?bta=982868&brand=casoo&utm_campaign=RIFT-CA-06"}'

Answers are JSON. Each change returns {domain, path, ok, action (add|replace|reset), old, new, change_id}
or {ok: false, error}. HTTP 200 all ok, 207 some failed, 400 bad request, 401 bad key, 429 rate limit.