CORE-4433 Added unsecured submit-tool-request endpoint.

Updated donkey.services.metadata.metadactyl/submit-tool-request to be unsecured, so that user info is looked-up from the request params.
Also updated this function to handle file uploads for the tool source and test files, so that the client can POST the request directly to this endpoint.