Update site.pp to use a trusted fact role

Allow including a role if defined via a trusted fact on the node
during provisioning time.  This is how I will bootstrap any
necessary configuration on the master, or other PE internal nodes.

manifests/site.pp

@@ -38,6 +38,11 @@ File { backup => 'main' }
 # specified in the console for that node.
 
 node default {
+  #incude a role on any node that specifies it's role via a trusted fact at provision time
+  #https://docs.puppetlabs.com/puppet/latest/reference/lang_facts_and_builtin_vars.html#trusted-facts
+  #https://docs.puppetlabs.com/puppet/latest/reference/ssl_attributes_extensions.html#aws-attributes-and-extensions-population-example
+  include $trusted['extensions']['pp_role']
+
   # This is where you can declare classes for all nodes.
   # Example:
   #   class { 'my_class': }