Create a new entity with optional metadata, attachments, and location
{ id: string, username: string } formatUnauthorized - 403 Forbidden
Invalid Project ID - 400 Bad Request
Server Error - 500 Internal Server Error
userId is provided, it must match the logged-in user unless the request is from a master key.