cleanup & refactor

Cleanup all the things. Major changes include:

*  <code>databases::postgresql</code> hates the way we install pg93, so hack around it
*  use yum_repository
*  use encrypted data bags
@ramereth iirc the srpms are a two-line diff from the upstream srpms. I  imagine tschuy has them sitting around somewhere.