HiNF Pages spike

• /player/api.php (Function at a .php path)
• /free/o/<token>/ (dynamic route with trailing slash)
• /spike/smtp (TLS 465 to Purelymail; AUTH only if secrets are set)
• /spike/irc (20 s anonymous Twitch IRC listen)
• /spike/r2/big.bin (R2 read; send a Range header)