CHEF-4553: DSL support for customizable guards for powershell_script, bash, et. al resource scenarios

I'm still updating this, but I think there's enough here to comment.

One thing I don't like: not sure the name "anonymous resource" is what I'm really looking for here -- suggestions welcome!