Publish deadlock with song

[rtisma]

When song tries to publish, it calls the download endpoint on score. Since the analysis is currently
UNPUBLISHED and score will only allow downloads for PUBLISHED files, therefore song cannot publish
because score only allows published files to be download. Fix is to add a new path param, that will
return object spec WITHOUT urls.

This also requires song to update to this release of score