Restrict the location where resources can be pulled from

Currently, the only restriction that SxResourceSource puts is that the document is a "resource", which means that it must be among the class files (WEB-INF/classes/ or one of the jars inside WEB-INF/lib/). A stronger requirement is needed, like that it should be in the /extensions/ subdirectory.