split yaml

templates: split into resources

This helps in several ways:

• We can static check the yaml ones
• When an error occurs, it's easier to pinpoint the section that failed
• CRDs can be applied before everything else

And some drawbacks:

• Can't simply reuse https://github.com/projectcalico/calico/blob/master/manifests/calico.yaml (though we had a modified version of it already)