tinc: let post-merge script generate ConnectTo lines

so that puppet does not need to take care of that.
it is not possible to specify peers to exclude with this fix,
which is something that has to be worked on.
This resource should at least require ~~Vcsrepo['/etc/tinc/icvpn/']~~ otherwise it could be executed before that repo is cloned.