Update roles in site manifest

1. remove roles that we are not going to deploy.

We have plenty of roles to maintain without making up new ones.

2. don't deploy ceph profiles on controllers

b/c it doesn't work yet

3. add the actual storage roles

- st (osd only)
- stmon (osd + mon)
- stmonleader (osd + mon leader)
Either that or adjust the environment file to deploy an oclb instead. I'm cool with that. We probably don't need dedicated haproxy nodes.

...we probably don't need dedicated etcd nodes either, but that's a different matter.