Let hosted apps developers edit version notes (bug 945858)

Also adjust version API: add id field, enable CORS

https://bugzilla.mozilla.org/show_bug.cgi?id=945858