refactor weave::install to better manage weave's dependency on docker
Resolve #1: provide new weave::firewall::* classes/types, managed puppet way