Allow setting resource limits on Kubernetes API server

When the API server goes haywire and eats all the RAM, that can both freeze the node and kill the etcd service, which is quite terrible.

We should set a default memory use limit of ~75% of the control-plane nodes total memory, which has proven to be decent in terms of robustness against total node failure.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information