Mint a signed URL-render link

Returns an HMAC-signed GET /api/v1/img/{template} URL for CMS / Open Graph <img> tags. The fetch itself needs no API key. Pass jobs (1–50) to mint many URLs in one call. Minting does not consume a credit; the first unique GET of each URL does. Repeats are cache hits.