AttributionTouchInput

One captured marketing-attribution touch: the raw utm_* campaign labels plus the referrer host and landing path the visitor arrived on. For privacy, send only the referrer host (never the full referrer URL with its query string) and the landing path. There is deliberately no origin field — the server classifies origin itself and never trusts a client-claimed marketplace origin.