Rationalize `build` and `hack` directories

* Rewrite a bunch of the hack/ directory with modular reusable bash libraries.
* Have 'build/*' build on 'hack/*'.  The stuff in build now just runs hack/* in a docker container.
* Use a docker data container to enable faster incremental builds.
* Standardize output to _output/{local,dockerized}/bin/OS/ARCH/*.  This regularized placement makes cross compilation work.
* Move travis specific scripts under hack/travis

With new dockerized incremental builds, I can do a no-op `make quick-release` in ~30s.  This is a significant improvement.

hack/local-up-cluster fails to even launch apiserver

--machines was removed but still referenced in hack/local-up-cluster.
This is not a total fix, but at least allows the apiserver to start.

Fix a missing lock in the fake etcd client.

Get docker deb from GCS

Also lock to 1.3.0 due to issues in 1.3.1 (docker/docker#8889)

Add events to kubecfg's list of resource types

Add basic authorization.

Added basic interface for authorizer implementations.
Added default "authorize everything" and "authorize nothing
implementations.
Added authorization check immediately after authentication check.
Added an integration test of authorization at the HTTP level of
abstraction.

Separate minion controller from master.

Fix a flaky test by draining the worker pool after syncing.

Community Recipes section

Separate design and user docs

Renamed: logging.md -> devel/logging.m
Renamed: access.md -> design/access.md
Renamed: identifiers.md -> design/identifiers.md
Renamed:    labels.md -> design/labels.md
Renamed:    namespaces.md -> design/namespaces.md
Renamed:    security.md -> design/security.md
Renamed:    networking.md -> design/networking.md

Added abbreviated user user-focused document in place of most moved docs.

Added docs/README.md explains how docs are organized.
Added short, user-oriented documentation on labels
Added a glossary.
Fixed up some links.

Fluentd example with Elasticsearch and Kibana in the same pod

Fluentd example with Elasticsearch and Kibana in separate pods

Demo files for logging for Fluentd and GCP

PodUpdate only has the delta changes, not full snapshot of all desired

Stop httptest server.

Fix self linking of objects returned in lists.

Allocate mux in master.New()

Add /boundPods to Kubelet

Use the Container VM image in the google-cloud project.

Don't include '.' in release tars.

Fix watch by namespace

Fixes #2078

BoundPods on a node. PR #1865 has a wrong assumption, with which any
PodUpdate operation will cause rest of running containers without updates
are killed as an unexpected ones.

Fix #2028