phab: disable suhosin for now, enable imagemagick

Signed-off-by: Austin Seipp <aseipp@pobox.com>
Refactor roles into directory; refactor gencert into systemd unit

Signed-off-by: Austin Seipp <aseipp@pobox.com>