Add support for custom ferm rules

You can now define custom ferm rules for either filter INPUT chain, or
all other chains as ferm configuration rules in a YAML text block and
pass them to 'debops.ferm' role using 'custom' rule type.