HA glance registry

- split all setup tasks into glance-setup recipe/role
- ensure only a single glance-setup role holder exists (since he sets the passwords)
- die if (default_store=file && ((glance-registry | glance-api) > 1) )