update example for new puppet-maestro
add missing sha for module
line up IDs to try and avoid clash with forge

In some environments, install was picking up the forge version instead, in
others the git one. librarian-puppet doesn't seem to like mixing them
move puppetenterprise conditional to hiera
bump module
Move nodes to hiera included classes
re-add spec
peg external repository to a specific revision
remove duplicated declarations
bump to latest puppet-maestro and include plugins explicitly
add firewall to common.yaml