internal api: List releases
Related to #4640 and following !440 (merged)
This new private API endpoint provides a list of releases (deposits with the same origin, a done status and a version number) related to a deposit. It will be used by the loader to populate the snapshot.