Consider allowing a gzipped `request` query param value

We might have to send it with a new param name to allow backwards compatibility (depending on uptake on `request`) if we support this in the future. Credential handlers would need to announce their support of gzip in their manifest.json files.