tweak jenkins slave definition

* The ssh_authorized_keys options values must be quoted
* align arrows in manifests/role/jenkins.pp
* Fixed the ssh restriction to use gallium IP address instead of its
  broadcast address.
* jenkins-slave user should not belong to the jenkins group.

Change-Id: I6a7603e094fd386aefaad04df34619cca6c39ac1