(RE-384) Tie downstream jobs to downstream label

Currently the downstream job is executed on any slave. This presents a problem,
since the downstream job calls curl, which isn't available on every platform by
default (I'm looking at you solaris 10). This commit updates the downstream job
template to assign the job to only nodes with the label 'downstream', which has
already been set up on the jenkins server and assigned to various sane linux
hosts.

Signed-off-by: Moses Mendoza <moses@puppetlabs.com>