Activate an instant stub listing for an unlisted domain

Re-validates https://{domain}/.well-known/releases.json server-side, then creates a stub org (basis: declared) for an unlisted domain. Already-stub domains take no write except an optional tracking-request stamp; tracked domains 409 with the org pointer. Public and anonymous; rate limited per IP and per domain.