first commit of api spec

I was under the impression that RFC4122 doesn't specify everything we require of the UUID *internally*. Firstly, we insist on it being lower case to avoid worrying about letter casing. The validator in content-store: https://github.com/alphagov/content-store/blob/master/app/validators/uuid_validator.rb