A number of changes to work in a for-real live use-case.

* Fixing CM API version to one that's publicly available.
* Make sure we actually apply the firewall rules.
* add "[arch=amd64]" to the Debian repos, since Precise requires that and the others can put up with it.
* Install some additional packages to be safe - libmysql-java on Debian, Cloudera-provided Oracle JDKs on all.
* Since we're hoping to install HBase, we should actually, y'know, install HBase. So that's added to BaseHandler.