Redmine#4482: use cf-promises -T in masterfiles staging

see https://cfengine.com/dev/issues/4482

Only deploys from staging if the staged policies validate correctly.

Using `returnszero` was the easiest way.