These two roles no longer need the delegation variable used in
testing, so it is removed. Role execution now happens on the
executor.
Since the remote servers are still on the worker node, we open
the firewall on the remote node in both cases.
In the artifactory role, the ensure-docker role is moved to a
"roles" section for simplicity. Additionally, one of the
artifactory API calls is wrapped in retries as a precaution
since I saw that fail in local testing.
Change-Id: Ia4409edc217e1935775a5aece2e7d9bcfd935762
15828c7a85