Cleanup testenv security group

Only permit external services from the internet and permit all traffic between members of the security group.

Remove unnecessary local_action directives from testenv playbook, we are already defining `connection: local, hosts: local`.