Add v1.0.2 of ncsa/puppet-profile_firewall
Update puppetlabs/firewall from 2.5.0 to 3.0.0
Add data/role/puppet-master.yaml to set profile_firewall::ignores heira data
so that docker firewall rules are not removed from puppet masters
Include profile_firewall in base.pp
