First version of foreman_ipa module

> this does seem rather odd as a separate module.

The whole http://theforeman.org/manuals/1.5/index.html#5.7ExternalAuthentication is optional but it really only makes sense to be configured as a block -- all or nothing. I don't know much about puppet-foreman but isn't there benefit in having it isolated?