Add check_norun cookbook to prevent chef runs selectively