Create a new spam filter for your organization. Provide either structured filter
criteria or a raw OTTL condition in the spec, but not both.

If metadata.labels["dash0.com/origin"] is provided, it must be unique within
the organization and dataset. A request with a duplicate origin returns 400.
If no origin is provided, the server auto-generates one (api-<uuid>).