Update ansible role for ics machines

We need to update the ansible roles for provisioning the actor VMs.
Specifically:

• Mount rga1-vm:/operdata/software on /software
• Mount rga1-vm:/proddata on /data. I think this should be pfs-data:pfs, g-w

Added postgresql to db-ics. Then createdb archiver and createuser -s pfs. And opened external IP access in {//etc/postgresql/postgresql.conf}}

Still need:

• For all accounts (esp. pfs@allhosts):

• umask 2
• PATH=/software/conda/bin:$PATH
• source /software/mhs/products/eups/default/bin/setups.sh

Because of time pressures during MCS commissioning, I put the postgresql server (and the archiver) on db-ics, and all other programs on shell-ics. All programs are run as pfs.

Manually added allow ftp rule to shell-ics ipfilter.