/resources/package-key/* is a special URL
It serves files without checking the site map or permissions. Its used for resources like icons, css files etc.
the url
/resources/acs-subsite/ will resolve to packages/acs-subsite/www/resources
so to make files available in this way you put them under package-key/www/resources/