Update witness API HTTP return codes
Pick 404 for unknown key hash to make it consistent across the two APIs, and since it doesn't make much sense for the GET to return 403 on a resource not found.
Pick 404 for unknown key hash to make it consistent across the two APIs, and since it doesn't make much sense for the GET to return 403 on a resource not found.