Adds first endpoint for model registry. Authorization follows the exact
same rules as generic packages, and the tests are the same.

Changelog: added