Namespace transition logs

Split this class and resources from `ci_environment` because they share
nothing except a Puppet repo. Removed the firewall class since it was empty.