add ensure param to port389 class

Controls package installation state via these values:
 * {present, latest, absent, purge }

On el6.x, the purg statee will manually `rm -f` all [known] 389 related
files as this is not handled by the 389 rpms.