after role deactivation stop services and remove HA resources

Once that PR is reviewed and accepted, I can start to finish the feature for the other barclamps as well. 
So please have a look at this one, as it will be similar to the other barclamps.
Don't you need to remove the `cl-keystone` clone before removing the primitive?