Add a management API to the object service

[djmitche]

• Delete objects
• List (interface similar to S3’s, with prefix and delimiter)
• Update object expiration

All protected by (non-anoymous) scopes.

The expectation is that such administration will be performed by CLI or API client, so there's no need to add UI for it.