Resource ordering fixes, cleanup some missing notifies and requires, puppet-lint cleanup

avoid restorecon for nameserver if not needed

(ab)use anchors to enforce ordering
cleanup dependency ordering