Add option to make a vhost only visible to us

This depends on configuration being set in pp-deployment
Add vcl and vhost for stagecraft

Stagecraft MVP is going to be locked down to just Aviation House and
Performance Platform, however, to take advantage of the load balancer
and make it easy to make public we're serving it out through the
frontend boxes.