(maint) Move methods for creating downloaders to factory

Previously, the plugin_handler module was responsible for creating
downloaders and evaluating them. Since all of this happens within a
single method it is hard to test that the downloaders are created with
the correct set of properties. For example, we `ignore` source
permissions when downloading plugins, but we `use` source permissions
when downloading external facts, since those often contain scripts,
which must be executable.

This commit moves the logic for creating the downloaders to a factory
and updates the tests accordingly. As part of this change, the
PluginHandler module is changed to a class and is no longer mixed into
the Configurer.
(maint) Test that external fact syncing depends on external feature

Previously, the test was trying to verify that the downloader objects
were created with the correct arguments, and testing that the
downloader was evaluated twice (since the same downloader was used for
both pluginsync and facts).

However, the downloader_factory_spec now tests that downloader objects
are created correctly, e.g. based on Puppet[:plugindest], so it is not
necessary to repeat that here.

This commit modifies the test to ensure the Downloader#evaluate
methods are called for both downloader objects, and adds a test to
ensure we skip downloading facts if the external facts feature is
false.
(PUP-3056) Restore Windows constants from mixins

 - Previously these constants were defined by using mixins from
   windows-pr.  As it turns out, while Puppet core does not need them,
   they are consumed by the ACL module.
(PUP-2907) Ignore source permissions on windows for fact sync

Previously, puppet on windows would always issue a warning:

    Copying owner/mode/group from the source file on Windows is
    deprecated; use source_permissions => ignore

Regardless of what was in the user's catalog. The reason is because
puppet applies an internal catalog to download external facts, and that
catalog contains a file resource whose source_permissions parameter is
set to `:use`.

This is done because external facts are often times scripts, which must
be executable for puppet to invoke them. See commit 21edcd67b for
PUP-2705.

This commit makes it so that source permissions for external facts are
ignored on Windows, while preserving existing behavior on other
platforms.

Permissions can be ignored on Windows, because puppet always has full
control of files it creates.
Merge pull request #2970 from kylog/joshcooper-ticket/master/PUP-2907

ticket/master/pup 2907
(PUP-3031) Move certification expiration check up

The http handler code contains a check to see if the expiration
date of the client certificate is within a certain window, so
that we can log a warning message if it will expire soon.

However, the mechanisms for handling this kind of check can
really vary depending on what web server you're running in, so
it doesn't make sense for this check to occur in a code path
that is common to all of the different web servers.

This commit simply moves the logic up into the code for
the individual web servers so that they will have the
ability to adjust the behavior according to their own
needs.
Merge pull request #2967 from Iristyle/ticket/master/PUP-3056-restore-constants-API-deprecations

(PUP-3056) Restore Windows constants from mixins
Merge pull request #2972 from cprice404/maint/master/PUP-3031-move-cert-expiration-check

(PUP-3031) Move certification expiration check up
Merge remote-tracking branch 'upstream/master' into puppet-4

* upstream/master:
  (PUP-3031) Move certification expiration check up
  (PUP-2907) Ignore source permissions on windows for fact sync
  (PUP-3056) Restore Windows constants from mixins
  (maint) Test that external fact syncing depends on external feature
  (maint) Move methods for creating downloaders to factory