escape colons in names

[ublubu]

By convention, the names of Kubernetes resources should be up to maximum length of 253 characters and consist of lower case alphanumeric characters, -, and ., but certain resources have more specific restrictions.

https://kubernetes.io/docs/concepts/overview/working-with-objects/names/

Not all names follow this convention, e.g. name: system:serviceaccount:kube-system:dns-controller
We can't use our typical strategy of combining fields with : unless we escape the colons in these names.

The ClusterRoleBinding implementation will include this new behavior, but we need to retrofit other types with the new escaping Name type.