appservice: Support Authorization header authentication

[johannescpk]

Spec change was merged: matrix-org/matrix-spec-proposals#2832. This would need the webserver code to check the request header in addition to checking the query param in the webserver::validate_access_token method.

Part of #228

[Hywan]

I'm closing this issue since #2509 has removed matrix-sdk-appservice.