This creates a private Stremio install URL that keeps your Real-Debrid token on the server. The manifest URL contains only an opaque install ID.
The server validates the token with GET /user, stores it encrypted at rest, and issues an install URL under /i/<installId>/manifest.json.
GET /user
/i/<installId>/manifest.json