core: unify randomization

Non-security randomizations are changed to use boost::random,
with a global random number generator.

refs #1369

Change-Id: I5000fd02f170fa47058af790e2bea767f9c65650