3413: added TrashHandler

* added a trashq WorkQueue to manage the trash list
* added TrashHandler to process "PUT /trash" requests
* added TestTrashHandler
What's wrong with `if !IsDataManagerToken(GetApiToken(req)) {`?