Provision local VLANs before port filters

Provision local VLANs ahead of establishing port filters so that
actions for flows for security group rules can be appropriately
determined.

Change-Id: I18f585afc4a342ce97033021a3c3dfb1776695ba
Partially-implements: blueprint ovs-firewall-driver