[WIP] add fxa-oauth-console to stack deploy

#### depends on [new-iam](https://github.com/mozilla/fxa-dev/tree/new-iam)
> what's the config trick to set the console to be under the oauth server path?

We've got to do a bit of trickery here since this is not off of the default domain name. Instead of adding some snippets that will get included by the main nginx template we'll overwrite the existing oauth snippet. (The main nginx config is in `web/templates/nginx.conf.j2`. Notice the `include`s and where they are.) You've got it most of the way there already so :+1: for that! We just need to add a couple things to this file.

First we need a new upstream for the console after line 3:

```
upstream upstream_oauth_console_server {
    server 127.0.0.1:{{ oauth_console_private_port }};
}
```

Then we need a new `location` with a rewrite rule here:

```
location /console/ {
  proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  proxy_set_header Host $http_host;
  proxy_redirect off;
  rewrite ^/console(.*)$ $1 break;
  proxy_pass http://upstream_oauth_console_server;
}
```

And that should do it for now. Make sure to put the `oauth-console` role *after* `oauth` in the `aws/dev.yml` and `aws/local.yml` files. Later we can make the nginx configs so that we don't need to overwrite the configs for other domains.