also updates to the latest indieauth client library as of 20201126

improves finding links to send webmentions to by using XRay instead of just using the first mf2 object on the page

closes #24

has better handling of profile URL redirects and error reporting

closes #5

closes #21

closes #18

use `me` and `authorization_endpoint` from session

* moves API key to settings screen
* adds Superfeedr subscription URL in settings screen

* new API route to handle Superfeedr notification of a mention
* sends webmentions to all URLs on the target domain of the notification
* adds "url" column to sites to specify the domain to use for superfeedr pings
* includes database migration

also adds test for ensuring other webmentions aren't sent when using target_domain

when used instead of target, finds all links to the target domain and subdomains, enqueues webmentions for them all, and returns all status URLs in the response's 'location' field. the HTTP Location header is omitted.

* API validates and accepts requests and writes to the DB
* tests check all API responses