Wrap errors from the API server

[hausdorff]

Reporting errors from the API server is a consistent source of friction, because it's not clear to users whether the problem is from Pulumi or their own code.

It should be trivial to fix this: call errors.Wrapf on every error returned from the API server, and add a message saying that Kubernetes itself is reporting something about your code.

This contributes to probably 50% of issues I encounter from new users. We should try to fix this in M24.

[hausdorff]

We probably also want to work on reporting await errors a little better. It's usually also unclear whether an await failure is pulumi or your code.