Clarify heat roles

Building on an earlier patch, I further clarified the purpose
of the heat_stack_owner and heat_stack_user roles.

Change-Id: I67804d2e7bfbd53e8f453adc251a102c6f0e39ff
Closes-Bug: #1401668
backport: juno
Merge "Clarify heat roles"