add REST documentation for content module

This should be `@Api private` as it's not supposed to be a user-facing endpoint