Implement the bundles-containing API endpoint.

The id resolution is done by the framework, which is supposed to be already tested.
If you want me to test those here too, that's ok, I agree on adding more tests.