Unauthenticated HTTP endpoints used by public giving pages and embed flows: load a campaign by slug, create one-time or recurring gifts, oEmbed discovery for the widget, and institution name search for brokerage selection.