Validate a bot-challenge widget token via siteverify. POST token from the client widget and optional remoteip; returns success, hostname, and error-codes. One verification per paid request.