Customize templates on a per-provider basis

This commit adds better template customization, including making the
installation of provider-specific kernel tools happen only when building a box
for that specific provider.

Also adds a default postinstall.sh which will blow away SSH host keys and
install a sane default resolv.conf.
Tidy postinstall customization of boxgrinder appliance