Allow postfiltering of results from kube

[ecordell]

Currently, only prefilter is supported, which requires that you store kube object names in SpiceDB somehow.

Postfiltering would do the request to kube and then filter the response. There are cases where this may be more performant, i.e. just checking a few items from kube against a large spicedb dataset.