Api principles (preliminary, very rough draft)

Actually should be `/api/{sub-api}/{version}/thing` (versioning should be global per API, _not_ per-resource).

The reason the monorail doesn't have a tenant in the path is not that it serves multiple APIs , but rather that it's not multi-tenant (because we can't retrofit multi-tenancy into it).