add API versioning

[the-daniel-rothig]

URLs should contain /v1/, implying that it will always be backward-compatible.

Returned payloads should be wrapped in metadata, eg

{
   "status": "success",
   "api_version": "v1",
   "result": { /*the actual object... */
}