move node config to roles
This is one more step towards the merge of Puppet with TPA. By moving node config to roles, we'll be able to eventually get rid of all node definitions and instead use TPA's ENC to deploy one role per node.
refs tpo/tpa/team#42096