hostkit artifacts

MVP-0 machine API. Use bearer auth on /api/artifacts. See /openapi.json and /healthz.