How does programmatic real-time bidding (RTB) work, and where in the lifecycle can fraud be introduced that DoubleVerify must detect?