ws: Add a firewalld service for cockpit-ws

This allows people to easily open the cockpit port in their
zones with commands like:

```
 # firewall-cmd --add-service=cockpit --permanent
```

It also provides the basis for getting this enabled in Fedora Server
by default.