[DO NOT MERGE/WIP] Configure nine

Adds a few new roles:

* nginx (not complete yet)
* supervisor (complete)
* supervisor-service (work in progress)
Let's comment these with what they mean -- `service_account` seems to be dedicated to running Ansible, while `worker_account` is for non-privileged systems?