docs: add resource abstraction design
Document the Resource Abstraction proposal, including Resource/Activation/Operation/CapabilityLease boundaries, sandbox filesystem projection, zero standing credential handling, Git credential helper flow, API egress proxy options, platform-service responsibilities, suggested schema, APIs, events, rollout plan, and open questions.