Add validation hook for HTTP handler

[zombiezen]

To permit some custom forms of securing a GraphQL endpoint (especially keeping an allow list of queries) and caching of validation results, I'd like to give the application the ability to override the validation process. This would take the form of a function like func(context.Context, string) (*graphql.ValidatedQuery, error).