move node config to roles

This is one more step towards the merge of Puppet with TPA. By moving
node config to roles, we'll be able to eventually get rid of all node
definitions and instead use TPA's ENC to deploy one role per node.

refs tpo/tpa/team#42096