Allow annotations to be specified for service objects

[reidab]

Some deployment environments require service-level annotations to trigger external features, such as Google Cloud's Identity-Aware Proxy (IAP).

Please allow customization of annotations for service resources.