Configure Heat stack domain

Heat requires for further services a keystone v3 domain to be
configured.
Weird that I didn't comment on that during the first review: could we move the shell code outside of the `variables` bit using a new variable? This would be a bit more readable (to me, at least)