Fix synchronization for vcloud-director NAT

- Previously was broken if two apps were deploying concurrently,
  because they have different PortForwarderVcloudDirector instances.
- Documents synchronisation model in NatService.
- Adds test (and tidies test config)