Fetch and extract one public web source, optionally restrict its hosts, and return the content by digest with full provenance.