Add firewall requirements for building CentOS 7 base image on CentOS 7 host

These changes are required to build the base image on CentOS 7, which includes an updated version of pykickstart, which in turn requires firewalld present at imgcreate time.

As firewalld is not necessary in the base image, remove it in kspost once imgcreate is done.