Implement ROLE filter

Target roles by including an env variable:

    ROLES=app,web cap production deploy

Closes #446, depends on https://github.com/leehambley/sshkit/pull/29