The scout puppet run manifest needs access

We commonly use the scout puppet last run plugin on our hosts, but the
default perms for a puppet install prevent it from running.  This opens
them up enough so it can do it's job.  Looks like this has been manually
done in the past, so just codifying existing practice.
Puppet lint fixes

Leave it cleaner than you found it,  I disagree with the split the line
at 80 characters always requirement, especially for splits in the middle
of commands like this one, so I've left it alone.  Should you disagree
strongly please feel free to add a commit to this PR.
Clean up unnecessary complexity

Using create_resource on a single element hash is a lot harder to read
than just creating the resource directly.
Merge pull request #4 from envato/scout-puppet-run-plugin-fix

Scout puppet run plugin fix