Implement metadata authority specification

!221 (closed) defined a new set of endpoints for dealing with extrinsic metadata, but it still isn't implemented because I had other priorities.

See the full spec for details.

---

Migrated from T2075 (view on Phabricator)