[#56945538] Install clamd and freshclam on mirrors.
[#56945538] Set up a cron job to scan /srv/mirror-data once an hour.

Also allow clamd to scan anything in /srv/
[#56945538] Make the cron job a script.

The script calls clamdscan such that it moves infected files to /srv/infected so make sure that exists.

The script makes clamdscan log and adds a useful timestamp.
[#56945538] use a class to create the app armour file.
[#56945538] add some requires to make sure things exist.
[#56945538] Use tags/branches for ClamAV/AppArmor

To make it clear why we've fixed on a specific revision. The commit refs
will be preserved in the `Puppetfile.lock`.
Merge pull request #17 from alphagov/56945538_add_clamav

[#56945538] add clamav

To comply with ITHC recommendations. We might want to move the use of `/srv/mirror_data` to hiera at a later date.