clone script updates and new cf temp

The clone script now takes explicit arguments for subnet, security group
and there is a dedicated vpc in the prod account for database clones