Add allow list

At this point we want to be sure only known TextAPI implementations can POST to our service.

Therefore we have to implement a allow list which includes all accepted URLs.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information