Related T806

Now, we use real basic archives for testing purpose.

Separated from the query/response flow, we now check that we can at
least read deposit's archives (implementation wise, we use django's
signal api).

If the archives' check fails, the deposit is deemed 'rejected'.  The
client can check the state endpoint to know the status.
deposit_status key).  Otherwise, the status is set to
ready-for-injection.

To:
- to receive the origin in that slot
- incidentally, respect the db model

This includes:

- dropping the old swh.deposit.auth module which included a basic
  authentication middleware. We now use djangorestframework's (drf).
  We did not prior to this due to some package version issue.

- As this returns json response in failing authentication though, we
  convert the response into an swh-deposit one (that code remained in
  the swh.deposit.auth module)