Temporarily use heat's heat-keystone-setup-domain

Heat uses keystone domains however our lxc keystone module does not
support this functionality (which requires keystone v3).  Our long-term
goal should be to update that keystone ansible module but this commit
bypasses the module and shells out to heat-keystone-setup-domain
which can set up the domain and domain user for us.