Expose debug endpoints allowing inspection of the fallback configuration

[czeslavo]

Make sure that /debug/config endpoints allowing inspection of the generated fallback configuration exist (returning a raw declarative configuration blob). Both the rejected configuration and fallback configuration should be accessible with the former annotating broken entities somehow (e.g. tagging them) and the latter annotating recovered ones. There should also exist an endpoint that lists all affected Kubernetes objects.