Apple AASA Validator

Fetches https://{domain}/.well-known/apple-app-site-association (direct request first, then an allorigins CORS proxy if needed) and checks common requirements.