Add apps and metadata service endpoints to support community admin app-tagging

Once an app is published, only a community admin should be able to add or remove an app from an App Community.

DE admins should also be able to add or remove an app from an App Community (via /admin endpoints).