Add API endpoint for kicking off a deploy

The frontend team already do this but by posting appropriate cookie data rather than using an API.  This will make it legit :)