Only POST a serialized version of the spec and only accept YAML.
Use safe_yaml gem to limit risk of code injection.
Respond with 400 when not satisfied with posted data.
Creating the pull-request will be done by a worker, so respond with 202.