add working autosign.rb

this assumes you have setup a working fog file (with region!) in
/etc/puppetlabs/puppet/autosignfog.yaml

this can be a secondary, read only to aws instance metadata account

install autosign.rb to /opt/puppet/bin/autosign.rb
chmod +x, chown pe-puppet

(manifest coming soon)