Add ufw firewall to swift proxy nodes.

This prevents unwanted access to internal services such
as memcached.

Publically accessible ports are SSH and swift-proxy.
All other ports are accessible only from `undercloud_cidr`.