Add a way to validate via URL

Have `/v1/validate` accept an arg like ?url=https://…/publiccode.yml would save clients from having to download the file and then send it over again.

Evaluate if it's worth,  and try not to turn the API into a proxy for abuse or DDoS (timeouts, size limits, redirects, https-only, etc).