Remove a funder, or delete one environment's saved integration

With an environment, deletes that environment's saved integration. With remove=true, removes the funder entirely. Exactly one of the two must be given: full removal is destructive (scrubs credentials and deletes the funder's policies row), so it must be requested explicitly — an absent or mistyped environment must never escalate into it.