Use VizObjects API.

That means there's no actual search. But there's a new API, so it's
Better.

[refs #76746092]
Serve with Access-Control-Allow-Origin: *

Also, respond to /metadata

[refs #78499288]