Resolves the site for a request.
the request URL; ?site= on it wins outright, unless allowParam says otherwise
?site=
allowParam
see ResolveSiteOptions; a visitor-owned URL must pass allowParam: false
allowParam: false
the id and the layer that produced it, so a caller can report WHY rather than just what
Resolves the site for a request.