Manage scap proxy rsync config in puppet

* Add puppet role misc::deployment::scap_proxy to manage configuration
  of scap fanout rsync servers.
* Apply misc::deployment::scap_proxy to mw1010.eqiad.wmnet and
  mw1070.eqiad.wmnet
* Create canonical list of MediaWiki application server networks
  ($::network::constants::mw_appserver_networks) and use it in all
  rsync and trebuchet ACL configurations.

RT: 7080
Change-Id: Iba7f8dcd74ad03a0530e9b165bb0cf48a8f8885a