Add resource search API

[rogerdahl]

The API should take a regex for key, label and type and return (key, label, type) for all matching resources that the user has at least read permission on.