Fix: acl: Authenticate pacemaker-remote requests with the node name as the client

Also:
- Standardize on XML_ACL_TAG_ROLE_USER as the field name
- Deprecate determine_request_user() in favor of the more comprehensive crm_acl_get_set_user()
Test: tools: See if we can make the regression tests pass
Refactor: xml: Rename pacemaker-1.1 to the more clear pacemaker-next
Fix: xml: If validate-with is missing, we find the most recent schema that accepts it and go from there
Fix: crm_report: extract additional DLM lockspace data
Fix: xml: Allow first-acl-match-wins semantics to be supported if desired