provisioner/puppet-masterless: rework internals, use SCP