create keystone heat role on just one HA node

to avoid an error message that the role already exists