Add 'gitusers' and 'sftpusers' roles

These roles allow you to manage restricted user accounts, either via
git-shell (restricted shell), or via SFTPonly (restricted SSH access).