Badge awards

This adds badge awards, and modifies ROA to allow for more dynamic resource URL construction (to allow awards to be fetched by badge and by user)
How does this work, given that `Award` doesn't seem to have a `person` field to filter on?