update defaults for uaa autoapprove/cf clients

also configure cf client to by default expire access tokens after 5
minutes, and refresh tokens after 30 days

[finishes #54728202]
Add blobs in support of Java buildpack

These blobs will enable the Java buildpack to run ok when there is
no internet connection.
add spiff cf-release template
loggregator status creds are not optional
clean up template; move a few defaults into specs
remove some junk from uaa config

This will probably break things. But I want to see how.
fix recursion problem
remove dead dea num_instances config

Doesn't appear to actually be used in the DEA.
use defaults for dea stacks
remove max_errors from template

this 'feature' was removed from bosh in commit 666c7c3f4e
default DEA limits to m1.large, not m2.2xlarge

also make the ec2 instance size constants more accurate
make all of syslog_aggregator configurable

This had some pretty funky hardcoded values before, and should basically be
entirely up to the stub.
move nats port/auth timeout into job spec

add descriptions for nats properties along the way
default cc resource pool minimum size to 64k
default router status port to 8080

Also remove bogus router.port config, which doesn't appear to be used.
fix typo
undo NATS server port default

Other jobs will have to get the property, so putting it in the nats job spec
doesn't help.
experimentally tweak canary/update watch time

also fix system_domain_organization default; CC expects a falsy value if not
set
split out cc/uaa properties
split out networks from deployment template

add helper script for generating manifest