Use role-specific Exec to manage wikimedia-task-appserver's apache

Stop the service via a role-specific Exec resource rather than a Service.
This is just for now; we can and should refactor this so that Apache is never
provisioned in the first place.

Change-Id: I07ce98456d8074b79150852d99a87037a429b3c7