Serve a server-status white page

Public, unauthenticated white page hosted by the backend instead of an external site: 403 and 404 answer with that status, blank with an empty 200. Any other kind renders the 404 page. Normally these are answered inline by the click redirect endpoint (so the visitor keeps the stream domain in the address bar); this route exists so the stored URL also resolves when opened directly.