deploy: Add CA component and ca role

The ca role will be a separate node able to create and sign
certificates. All components that need a certificate will get it
from this node. Since we are going to have one common certificate
for the synnefo.live CN including all DNS alternatives (astakos,
cyclades, vnc, etc.) this certificate will be created in advance and
everyone will get it during setup.

The cacert.pem will be added to the firefox db via certutil -A.

snf-vncauthproxy will use the corresponding cert.pem and key.pem.

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>
deploy: Add vnc role

snf-vncauthproxy can now run on a separate node.

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>
deploy: Use the certificate issued by our CA

Apache and VNC will use the certificate previously issued by our CA.
For the Client we add this certificate to the system wide accepted
ones via update-ca-certificates and to the firefox database via
certutil.

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>
deploy: Configure cyclades for remote VNC proxy

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>
deploy: Cleanup useless actions wrt certificates

Since we are using a proper CA we do not need cert_override.txt
nor we should update-ca-certificates for skakeoil cert.

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>