Add initial resources.md for discussion

The first draft of a Kubernetes resource model.
I think it's safe to say that the path must be URL-safe, so non-ASCII UTF8 would be URL-escaped back into URL form.  We probably won't ever treat these as URLs, but users might, so maybe we should straight up say they are URL-paths.