validate LocalArtifact data in API artifact creation (#173)
The API endpoint did not run LocalArtifact Pydantic validation, while the web form already did.
this change invokes LocalArtifact._create() during API artifact creation, when the category corresponds to a LocalArtifact subclass, so inavlid data fails early with HTTP 400
adds tests for valid and invalid debian:lintian artifacts.
closes #173 (closed)