ensure git in base role
expose explicit openssl versioning to proxy/nginx recipe
update gem + berksfile