Update README, package.json; add LICENSE.
No need to set EXTERNAL_URL.

Not sure why I didn’t think of this before, but we can just use the incoming Host header.
Validate offset parameter to be a number.