Allow API resource extra_data handling to be disabled per-field.

WebAPIResource subclasses can now determine on a case-by-case basis
whether a user-provided extra_data.* field can be set in a request.

This will allow for special handling of certain bits of extra_data by
Markdown-capable custom text fields.

Reviewed at https://reviews.reviewboard.org/r/6539/