Vagrant: move provisioning into a separate script

as then I can use it to set up non-vagrant VMs as well