Vagabond locations API

Use GET /api/locations from your Venue Map code component (same site origin, no CORS).