add RFC952 validation to labels

Add label validation of labels to  pods, services, relicationControllers, and replControllerState

Fixes #1297
This is a behavioral change that may well break demos or users - can we do that as a separate PR?