Filtering on more than name/namespace

[ecordell]

Prefiltering (and eventually postfiltering, see #39) responses works by loading names or names/namespaces from spicedb and filtering kube results.

For now, we should collect use-cases for other types of filtering in this issue, before deciding how they should be specified.