add namespace-level quotas for cpu and memory

ResourceQuota limits the overall sum of requests and limits requested by pods. The K8s API will reject attempts to to create any pod that would make the total requests or total limits go over these values.

LimitRange effectively adds default requests and limits for pods that do not declare that themselves.

Also added additional checks for failed resource creation in the K8s cluster. This was necessary as Helm cannot detect those situations and will happly return a status of "Deployed" even though no resources were created. For example when a pod cannot be allocated due to namespace quota restrictions

Bug: T386008