Invisible/managed CAPTCHA. Token returned client-side, verified server-side via /verify/turnstile.
/verify/turnstile
URL params: ?captcha=on|off|visible|invisible|expired|failed · ?delay=ms
?captcha=on|off|visible|invisible|expired|failed
?delay=ms