adding bastion role and task to setup access to the dbs from it

should be merged with https://github.com/edx-ops/mckinsey-secure/pull/37