Fetch and consolidate sponsors/backers

[balupton]

As fetching backers and sponsors generally require secret API tokens, it is not suitable to do the fetching directly from projectz, but will need to be wrapped via a helper like this one.

We should provide a API endpoint that returns the name of the backers for applicable use cases, such as being injected into package.json files.

Details of our apps can be found in the 1Password Bevry Vault.

[balupton]

https://github.com/bevry/sponsored is where this will happen