make elasticsearch listen on mgmt network only

- needs wrapper recipe cb-logstash::server (for both elasticsearch and
  logstash)
- osops-utils dependency