subversion: move ferm rules from module to role

Change-Id: I63feb5c0a2e34c35eb21731c440e7252bf8e9cd9
Merge "subversion: move ferm rules from module to role" into production