fix: correct API issues found by second codex review across 14 CLIs

Fixes from thorough codex review (o3 high reasoning, 5 parallel batches):

Validation fixes:
- customer-io: add ID validation for customer/campaign commands, event name check
- dub: fix links get to use /links/info endpoint, add --id validation
- google-search-console: fix countries to use ['country'] only, add --url validation
- mention-me: add --customer-id validation on referral/share/reward commands
- tolt: add --id validation for affiliates get/update

Auth & API fixes:
- apollo: move API key from header to JSON body, fix search endpoint path
- rewardful: change from Bearer to Basic auth
- hotjar: split OAuth URL (unversioned) from resource URL (v2)
- amplitude: wrap retention e param in JSON array
- snov: change list prospects from GET to POST with JSON body
- optimizely: change archive from DELETE to PATCH status=archived
- google-ads: fix budget body field from camelCase to snake_case
- resend: change webhook field from endpoint to url, add validation
- linkedin-ads: add required campaignGroup URN, fix numeric amount types

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

tools/clis/dub.js

@@ -77,10 +77,13 @@ async function main() {
           const params = new URLSearchParams()
           if (args.domain) params.set('domain', args.domain)
           if (args.key) params.set('key', args.key)
-          result = await api('GET', `/links?${params}`)
+          if (args['link-id']) params.set('linkId', args['link-id'])
+          if (args['external-id']) params.set('externalId', args['external-id'])
+          result = await api('GET', `/links/info?${params}`)
           break
         }
         case 'update': {
+          if (!args.id) { result = { error: '--id required (link ID)' }; break }
           const body = {}
           if (args.url) body.url = args.url
           if (args.tags) body.tags = args.tags.split(',')
@@ -88,6 +91,7 @@ async function main() {
           break
         }
         case 'delete':
+          if (!args.id) { result = { error: '--id required (link ID)' }; break }
           result = await api('DELETE', `/links/${args.id}`)
           break
         case 'bulk-create': {