Custom validation hooks

[radu-matei]

When a new bindle is pushed, as a server operator, I would like to be able to define custom validation hooks to run so that the server can reject a new version if the validation fails (this would be in addition to verifying parcel SHAs).

An example is for a WebAssembly library component that claims to implement an interface to actually check the implementation and reject the package if it doesn't.