Add clamav to frontend role

The admin app runs on frontend-app machines and requires clamav, we now
need this to exist.

We should be able to remove it off the backend machines when backdrop
admin is retired.