Move url_for into heat_keystoneclient.

This allows faking of this call, and removes one instance of
accessing the encapsulated keystone client.

Change-Id: Iad2a9aaad2e9f1dc3cbeb509c822a61427f12817
Merge "Move url_for into heat_keystoneclient."