Get an entry’s handles

Just the entry’s handles, in the order its page shows them: the same list as handles in the entry. An email address is listed with its value, label and URL all null.

Any origin may read it: Access-Control-Allow-Origin: *, methods GET and OPTIONS, no credentials. An OPTIONS preflight answers 204. No key is needed. A request that sends one (Authorization: Bearer) has it checked, so a wrong, revoked or expired key is refused 401, and is counted against the key’s read limit; it gets the same answer, marked no-store.