Verify/test out of band additions/deletions to a k8s controlled LZ - write up procedures for unmanaged/shared resources via hybrid kubernetes/terraform/gcloud/console orchestration

See #818
update in the staging wiki https://github.com/GoogleCloudPlatform/pubsec-declarative-toolkit/wiki/DevOps
reference gcloud + k8s scripting in https://github.com/GoogleCloudPlatform/pubsec-declarative-toolkit/blob/gh766-script/solutions/setup.sh#L145
Verify the following list

1 - add a new project outside kcc - attach that project to a managed shared vpc - will it get reverted
2 - delete a managed resource in console - check recreation
3 - modify a managed resource in console
4 - add a completely separate project in console - make sure k8s does not acquire
5 - add/modify a new logging sink on a folder that is managed