fix(pm/pds): add anisota workarounds for minion

We previously had some anisota workarounds. We gave the anisota dev an account to see what was going wrong, so we didn't want to have them generally. Since as anisota proxies requests via itself, we can't make these requests active only on the tailscale. Instead, we can introspect the did for these requests, and enable it only for certain accounts. If you'd like to be included, please make a patch. URL encoding is required as nginx does not decode args in these variables...