beta: manage parsoid using upstart

On the beta cluster, we want to restart parsoid via a ssh command using
`/etc/init.d/parsoid restart`. That eventually calls a background task
which cause the file descriptors to be kept open by the spawned child
process. To prevent data loss, ssh does not close its connection and
hang.

This patch:

* converts the init script to an Ubuntu upstart service and make use it
  on the beta cluster. Production is left unchanged, the old bits in
  role::parsoid::common have been moved to the production class.
* logrotates /var/log/parsoid/parsoid.log. Limiting size to 1GB in case
  some bugs cause a ton of spam ending up filling the harddrive.
* writes stdout/stderr to /var/log/parsoid/parsoid.log. Now configured
  using /etc/default/parsoid variable PARSOID_LOG_FILE

Finally allow ssh connections from the deployment-bastion.pmtpa.wmflabs
instance (10.4.0.58) by adding a ferm::rule.

bug: 57233
Change-Id: I3d4a49b37e6759ae222ab2fdb698576228dcc96e