stunnel: make site_mx and site_webapp use new site_stunnel
moved json macros to provider_base/lib/macros. requires new unreleased leap_cli
fix stunnel entries in mx.json and webapp.json
haproxy: support read only couchdb mirrors