add instance_role attribute at provisioner level

right now needle-base depends on this attribute in order to avoid
running recipes like manage_hostname which aren't ready for test-kitchen
yet