Extract endpoints and secrets from JavaScript bundles

Front-end bundles list API routes, parameters, and sometimes keys the rest of the site never links to.