Let hosted apps developers edit version notes (bug 945858)

Also adjust version API: add id field, enable CORS
Add release notes to the apps/search API (bug 945858)