What about this route simply being `/providers/:id/manifest` since import is like a create? Then refresh could be a PUT to the same URL,  and a manifest delete would also just be an HTTP delete.