split authkey into multiple recipes for flexibility

We may need this in the future, if the current search-based
approach in authkey.rb doesn't prove reliable.
add ruby-shadow to crowbar.yml just in case it helps

Needed by corosync::service recipe when modifying corosync user password.