openssl: move certificates to site-cookbooks
tasks: update upstream:changes
add workstation role
fix minor issues