Service-bound HTTP requests

This introduces an abstraction for "service-bound request functions", which allow you to perform HTTP requests without knowledge of the tenant, name of the endpoint in the config file, region, or authentication.

It's based on the pure-http-refinements branch, so to see only the changes this branch makes, see here: https://github.com/rackerlabs/otter/compare/pure-http-refinements...service-bound-http
From our discussion on Slack: this doesn't actually bind a tenant, it just uses the tenant (+authenticator) to get at a service catalog. The docstring should be amended.