docs: add member_api.md

Expose member operation HTTP API to the public.

Goal:
- agree on this initial HTTP API format
- agree on this doc style

Non-goal:
- add new feature
- add new status code
seems like we do not have a `duplicate member` error. so if the user sends out two duplicate request, he should expect the second one to be successful?