Configure Heat stack domain

Heat requires for further services a keystone v3 domain to be
configured.
Setup a heat_stack_owner role and enable trusts

Trusts is the preferred (more secure way) of orchestrating
resources.