beta: convert into a module

Also reduce the number of roles available. Now limited to:

role::beta::bastion which includes most class needed on bastion

role::beta::natfixup to be applied on instances running MediaWiki

Change-Id: I2200ce11e948ba96c1fedd20083db1fd62c64620