enable ip_nonlocal_bind for ha-controller roles

- use sysctl provider to set sysctl values instead of procps service
  so that we are cross platform compatible
- set shared_address flag only for our ha-controller roles
- depend on sysctl cookbook