Support card validator

Paste a card or fetch it from a URL. We check it against the schema and the discovery rules of the spec (HTTPS, content type, CORS, caching, redirects). Nothing is stored.