Add API endpoint to bulk-update contribution codes

This can be a normal RH (ie accessed via a `full:everything`-scoped token) which simply takes a JSON payload mapping friendly IDs to program codes.

The response could be a `{id: [old, new]}` dict listing what was changed (also JSON of course).