Add a fact to pull the ec2id out of instance metadata.

Previously we had some circular bits where the puppet cert
was coming from $id but $id was coming from the cert.

Change-Id: Icd0ddc1b24242c4dd8a7887071904e1cdb9e4cd8