DevOps: Final Shibboleth-v2 Identity Provider Release

This release contains several contributions, but focusses on the stabilisation of the playbook and roles providing the Shibboleth IdP (V2) functionality. Several fixes have been made to ensure that the Ansible code in the roles is updated to Ansible-2.x syntax. Work has also been done to put in place commerical certificates if they are present, right from the start, and deploying self-signed certificates as a default fall-back approach.

Some work has been done to move the sensitive ldap role variables to the vault-encrypted passwords file for the group (site) that the services fall under.

The release is not "containerised", meaning that there is no use yet of Ansible-Container.