Run "keystone-manage db_sync" on SUSE when HA is enabled

So far, we were not running it because the init script on SUSE does run
it. But with HA enabled, the service starts at the same time on all
nodes, which may result in failures on some nodes because db_sync can't
be run multiple times simultaneously. The end result is that the
pacemaker resource was possilby failing on some nodes, which then
required some manual cleanup.
Update for prepare_role_for_ha_with_haproxy API change
Merge pull request #204 from vuntz/api-change

Update for prepare_role_for_ha_with_haproxy API change
Merge pull request #208 from dirkmueller/release/stoney/master

Cleanup user/group defaults
Only run the db_sync the very first time (on SUSE, at least)
Do the db sync only on initial run, and on all platforms
Merge pull request #203 from vuntz/db_sync-for-ha

Run "keystone-manage db_sync" on SUSE when HA is enabled
Merge branch 'release/roxy/master' into roxy-sync
Merge pull request #210 from vuntz/roxy-sync

Merge roxy branch into stoney
Simply replaced havana with icehouse
Merge pull request #211 from tboerger/feature/havana-to-icehouse

Simply replaced havana with icehouse
Merge pull request #209 from dirkmueller/release/stoney/master

Make Keystone API's Region available
install .openrc in the keystone::server recipe

The .openrc file contains useful values for interacting with OpenStack
via the command line such as the keystone service's location and
credentials.

This is being moved from the nova cookbook since there are no nova
specific entries in the file and keystone is higher up in the
barclamp/cookbook dependency chain.
update keystone.conf to Icehouse

- Added a lot of `oslo.messaging` attributes which are unused around
  `amqp`, `rabbitmq`, `kombu`. `rpc_backend` now defaults to rabbitmq instead
  of kombu (but we were never changing this value)

- [auth].methods changed default from `external,password,token,oauth1`
  to `external,password,token`. This was set explicitly in our config,
  but I think it was only because that's how it used to be in Havana as
  we weren't using (or configuring) oauth1.

- A lot of the config options which we were hardcoding are now
  defaults (and commented in the sample config). These were left
  commented like upstream:
  * [auth].password/token/oauth1
  * [catalog].driver
  * [ec2].driver
  * [paste_deploy].config_file
  * [policy].driver
Renamed i18n file, added quotes and copyright
Merge pull request #217 from tboerger/feature/i18n-rename

Renamed i18n file, added quotes and copyright
Moved helper into barclamp namespace
Transformed readme to markdown
Added/Updated gitignore
Merge pull request #218 from tboerger/feature/helper-rename

Moved helper into barclamp namespace