Use mbus config from settings.json only

Confusing if specified in two places
Move ubuntu-specific firstboot into harden recipe