Make `fetchJSON` return `Promise<unknown>` rather than `Promise<any>`
and add appropriate types and casts for the remaining API / OAuth
responses that didn't have them.