config.json via settings-api.php β update here, everything updates.
Include config.php in PHP proxies. Use config-loader.js in HTML pages.
?token= on every page and proxy. All other keys are protected by this token. Keep it strong.