Add Gemfile, Puppetfile and related files
Add minimal production environment

* environments/production points manifests to top-level modules/ and
library/ tree
* manifests/site.pp just enables hiera to define class lists
rename libexec/ -> bin/
Replace homegrown YAML merger with hiera
drop munin
bump up modules/common/* to modules/*
bin/puppet-apply - run Puppet via agent or locally
bin/*.rb - fix quoting in error messages
drop munin::server from manage profile
firewall - clean up template, use hiera

setting $apache, $mysql, $servers NYI
nagios - update nrpe template
site.pp - suppress allow_virtual deprecation
net::* update

* install minimal /etc/hosts that hardwires `puppet` address
* set resolvers to ones in hiera or install ndjbdns local cache
hiera: ipaddress_manage -> managehost
add base::*

standard packages, directories, files
update nagios::*

* nagios::client exports resources
* nagios::server instantiates them
update apache::*

* Apache 2.4
* remove Ruby DSL certs
* mod_status on its own port
base::sysctl - update for sysctl.d style
build - fix httpd template
nagios - drop old auth file