add REST documentation for mediacore module

This REST endpoint is only use as a callback and is therefore not intended for general consumption. We should have the equivalent of `@api private` for REST endpoints