Add `--environment development` for Vagrant

So that Vagrant VMs can pick up the right hiera file.
Use gds_accounts to manage/purge accounts

This will remove the `ubuntu` user from production VMs. Which is desirable,
because we shouldn't need it beyond provisioning.
Add accounts for WebOps permies

More to follow. Probably needs to include everyone SC / 2nd line.