kideon releases

public reads:  GET  /<path>
auth writes:   PUT  /api/release/<path>   Authorization: Bearer <token>
auth deletes:  DELETE /api/release/<path>