labs beta: make a class that explicitly has test repo plus ferm ssh rule

this makes sure that the deployment bastion has ssh access to
any beta instance with the trebuchet testrepo

Change-Id: Idd35bf7aa73120b1aec3e4199ebf12a13ae04f13