ws: Add a firewalld service for cockpit-ws

This allows people to easily open the cockpit port in their
zones with commands like:

 # firewall-cmd --add-service=cockpit --permanent

It also provides the basis for getting this enabled in Fedora Server
by default.

Closes #806