Initial Readme

Includes a basic sketch of the ui of `pan map` and stubs for other sub commands.
The idea of a single bastion seems too special-case-y to me. It seems like, if I were in a network that was laid out this way, I'd just run `pan` from the bastion host, rather than expecting my tools to have logic to deal with that peculiarity.