[COOK-3379] Only regenerate keystore and restart when source files change

Fix a bug that was causing the keystore to be regenerated and tomcat to restart every chef-client run. The fix involves switching from "creates" to "action :nothing" to control when the keystore generation script runs.

See http://tickets.opscode.com/browse/COOK-3379