Add tags to all base roles
Remove absurd timeouts from openspending.org configuration

These timeouts (particularly the proxy_read_timeout) may have been set
under the false assumption that they refer to the maximum time a
request-response cycle may take. In fact, proxy_read_timeout is a
byte-to-byte timeout, which defaults to a perfectly sensible (and
frankly quite generous) 60s.
Remove unused openspending-redirects config