database: Make repo optional, add firewall

Since non-mariadb mysql servers are also legit, support
that. Added a firewall definition for port 3306 (can be
overridden using the hash). Removed profile::base since
this is a separate profile.
messaging: Add firewall support and remove base
openstack: add firewall to nova, keystone, glance
openstack: consoleproxy was misnamed, added firewall
openstack: Improvements to compute/hypervisor

Check hypervisor choice is valid, make telemetry
optional. Add nova::compute::neutron.
openstack:Add plugin/driver flexibility to network
openstack: add firewall to neutron-server
openstack: make metering optional in neutron l3