when used instead of target, finds all links to the target domain and subdomains, enqueues webmentions for them all, and returns all status URLs in the response's 'location' field. the HTTP Location header is omitted.

* API validates and accepts requests and writes to the DB
* tests check all API responses