Add Puppet ENC

This implements configuration according to hostnames:

  * `ROLE-ENV-TAG.domain`

Nodes will be thus instructed to declare the `role::${ROLE}` class
corresponding to the ${ENV} environment.

The `TAG` should be added to make sure that FQDN uniquely identifies a
node.