Add all files/dirs under /etc/etckeeper

As we're about to start managing the /etc/etckeeper/*.d dirs to
alter the behaviour, its good for us to completely manage these directories
ourselves.

We can then mark the directories in /etc/etckeeper as 'clean: True', and
have salt automatically purge files created under here manually.

Considering we're using this as a layer of defense in our security stack,
this is worth the effort to maintain.

NB: Unfortunately salt does not allow for simply saying 'this file is ok', so
    we must override the package management of these files.
Add 'tig' as a dependency.

It makes looking at changes in /etc an absolute breeze.
Add our own APT install helpers to highlight salt

These work by hooking in *before* the regular APT helpers kick
in, and ensure that the commit message for pre- and post- package
install commits contain a #under-salt-call or #under-salt-minion
hashtag.

We can then use these hashtags to distinguish between changes made
during a salt run, and more importantly: ones made outside of it.
+x on README files confuses etckeeper

Really daft, but we must remove them or work out a way of
making them 644 -- its easier just to have them for reference
here.
update CHANGELOG, README
Update CHANGELOG
Use {type}.{method} form of state def
Merge pull request #2 from ministryofjustice/highlight_salt_apt

Highlight salt package management operations; completely manage /etc/etckeeper dir