fixes #8477 - usability improvements to template locking/defaults

- In practice, locking templates without the ability to unlock them doesn't seem to work (see the foreman_discovery issue that would be fixed by #7480).
- Provide a warning for templates that are shipped by default by plugins
- Exposes the 'default' option to users so they can mark templates to be automatically seeded or not
- Mark foreman templates as default on new installs

If this or something like this is taken, I can remove the code from Katello seeds that touches Foreman templates.
If you change the ```can_``` helpers to what I wrote below, I think this method should just be

```ruby
if SETTINGS[:locations_enabled]
  can_create_locations?
elsif SETTINGS[:organizationss_enabled]
  can_create_organizations?
else 
  can_create_organizations? && can_create_locations?
end
```