fix #3291: set the soledad port properly in the json and as a temporary work-around, use the couchdb admin/passwd

Change-Id: Ibb1cd8416d00552f8ca1716e42a08137a4b461aa
For now, soledad will only exist on couchdb nodes (but not every couchdb has
soledad), so fix the port to be the local couchdb port.

In the future, we may want to separate them out.

There is no need to do haproxy with soledad, because the client is supposed to
try a different soledad node if it can't connect

Change-Id: I87e2c5079ba361634336316721c4358a0917fb09
add a requirement to soledad.json that soledad service is found on a couchdb
node, if it is not, it will fail to compile

this requires a newer leap_cli, so I've bumped the compatibility requirement

Change-Id: Ie1061798d058087126163793b216dd5938eb95a6
make site_shorewall::soledad use the hiera value for the soledad port

Change-Id: I923f15de807f907d6246c3a83df1e59c39d4e920