Introduce role-based serverspec testing, powered by Vagrant

This allows for writing and running acceptance tests for specific roles
(dist/role/manifests/*.pp) and spinning up a Vagrant AWS machine with that
role, then running the appropriate serverspec tests against it.