Extract our debomatic configuration into a Puppet module

debomatic.lizard is currently configured in the (private) manifest. We should extract this into a proper Puppet module.

Original created by @intrigeri on 6920 (Redmine)

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information