ssl: Add playbook for constrained deploy

We need a playbook to quickly and surgically update the SSL certificates of a cluster without needing to bounce all services or take a control plane outage. This playbook provides that ability.
We could break it out from the common role, into a smaller item. I would actually prefer to break common apart completely into a meta-role.

The following are in common which are needed:
```
./roles/common/tasks/ssl.yml:6:  template: src=openstack.crt dest=/usr/share/ca-certificates/openstack/{{ endpoints.main }}.crt
./roles/common/tasks/ssl.yml:11:- template: src=openstack.crt dest=/opt/stack/ssl/openstack.crt mode=0644
```