Add resource_url - a subtype of url - to $sce.trust.  resource_url's are
required for ng-include and src/ng-src and imply that the url contents
belong to us and not a third party.

Also ensure that the href of a link tag, the poster of a video, and any
formaction attribute also require $sce.trust() interpolations.