[prd-2044] allow ceph-deploy osd activte retry

in order to work around issue with current version of ceph-deploy (1.2.6 - 1.27) we will allow osd activate a short time out and a handful of retries.

Fixes PRD-2044
RadosGW requires Keystone token_format = PKI

RadosGW Keystone intergration requires keystone to use the PKI token_format. This adds the ability for the manafests upstream of keystone to be passed $token_format as a variable and sets token_format with use_ceph
RadosGW fixes

move command to create signing certs for NSS db to radosgw
fix some file and package deps
add chain to make sure keystone will run fist
added file to makesure fastcgi.conf is usable
improve keystone-manage pki_setup exec
Conditionalize keystone usage in CEPH
debug