Here is how the /diagram endpoint works:
When your BPMN XML is named foo.bpmn, then you can deploy an image foo.png along with it and it will be available via the GET diagram endpoint, i.e. the image must have the same name as the BPMN XML minus the file name extension. Supported image extensionare svg, png, jpg, gif.