Allow action w/override in service declaration

The jail.conf template defines 3 separate actions but no way to override
the default action or any action per service, despite the instructions.

Adding a new attribute for action and render action if specified within
a service definition.

Fixes https://tickets.opscode.com/browse/COOK-3899