Added ability to specify security group for node group

Extended API to support list of security groups in node groups and
node group templates. Changed db schema and provisioning engines (both direct
and heat) accordingly.

Partially implements: blueprint cluster-secgroups