Add initial rest-api spec

Sending this for initial review. It's not complete yet but it's going to be hard to design the entirety of the API on first pass.

Feedback on the overall design would be appreciated, then if the structure makes sense, I can update it to include more details about some specific bits and pieces (container creation, snapshot handling, trust store management, ...).