HTTP proxy for repositories (kickstart/preseed)

This introduces two new variables:
- http-proxy
- http-proxy-port

This proxy is then used to fetch stuff from the mirror. It's intentional that the communication to the Foreman instance is not using the proxy.

This is thought more as a WIP for discussion.
Nope.
```
There was an error rendering the Kickstart default template: undefined method '!' for String::Jail (String)
```