Add ufw

This pull request adds `ufw` support, by:
- adding the UFW module to the Puppetfile
- adding a manifest to restrict access to :22 from any IP
- running librarian-puppet in order to create a working Puppetfile.lock