beta: fix wrong include in role::beta::natfix

The code:
    class role::beta::natfix {
        include beta::natfix
    }

probably cause puppet to resolve 'beta::natfix' to 'role::beta::natfix'
thus including itself and never including the module class.  Prefixing
with :: solved the issue on labs.

Change-Id: I22d2f6be261dfe0749b68aa74bc46d1e58c832be
Add labs eqiad bastions in networks.pp

The ferm rules allow ssh access from the bastion. For some reason the
new labs bastions were missing from the network list.  That in turns
prevents ssh access to instances using our base::firewall class.

Change-Id: I35599a30ef3d5cdd7ab756427081b4e8cecc5587