Ports document now used to store opened ports for machine/network tuple.

This patch is the beginning of a solution for #1216644 . 

To implement this, a new openedPorts collection is introduced, with a ports document for each machine and network (only the "juju-public" network is supported at the moment).

Any existing port entries in the unit document are migrated to the ports document. New ports are still appended to the ports list in the unit document - this functionality will be removed when the firewaller is updated to watch the openedPorts collection.
Please create a bug for this (or get number if it exists already) and put a todo with the bug number on everything that needs to be updated once the firewaller. The convention seems to be e.g: TODO(axw) 2013-09-24 bug #1229507