internal/router: bulk metadata API implemention

We also fix all paths so that they start with / after splitting. This makes them compatible with the usual way that paths are specified in URLs.
IIUC this TODO no longer applies.