added menu items to "Download Manifest"

added CSV downloaded manifest at "services/api/edit/manifest-csv/{pid}"
manifest generated from Solr, but data is marshalled locally in a big hashmap

needs to be prevented from running on Collections object (how?)
controller also includes a JSON endpoint of the same data (not downloaded) at "services/api/edit/manifest/{pid}"
use CSV quote escape char