Vale construir sua versão de LnkFlow?

Build me a branded link shortener with click tracking to replace LnkFlow. Requirements:

- Cloudflare Workers via wrangler: KV for the slug lookup, D1 for the click
  log. Free tier, nothing to babysit.
- A worker on lnk.mydomain.com/{slug} reads KV, writes the click to D1 inside
  ctx.waitUntil so the redirect never waits, then 302s with X-Robots-Tag:
  noindex and Cache-Control: no-store.
- Inject UTM params at redirect time from the link's KV record, and pass
  incoming fbclid, gclid, gbraid, wbraid, and msclkid through to the
  destination untouched.
- Log per click: slug, timestamp, country from request.cf, user-agent,
  referer, and those ad click ids. Skip bot user-agents from a pattern list
  in one file.
- An /admin page behind one password (wrangler secret) to create links and
  show clicks per link per day as a plain table.
- Secrets via wrangler secret, never in wrangler.toml. No accounts, no
  third-party analytics, no telemetry.
- Out of scope: posting Purchase events back to Meta CAPI or Google offline
  conversion import · stable event_id for pixel dedup, fbc as
  fb.1.{timestamp_ms}.{fbclid}, and refund reversal. A silently wrong
  conversion feed is worse than none.
- Out of scope: TLS for domains I do not own. My own subdomain is one DNS
  record · a client's domain means Cloudflare for SaaS and DCV renewals.
- README: wrangler setup, the KV namespace and D1 database, the DNS record,
  and adding the first link.