Consider moving resource {^substitutions} to a build process

[domenic]

There's really no reason we're doing this at runtime :-/.

Adding a build process to the resources step could also open up a lot of possibilities, like using a more user-friendly format than resjson (what can I say, the commas are annoying).