Migrate vault nodes to puppet-on-k8s (#562)

Vault nodes build their peer list from a region-scoped PuppetDB query of their own role, so all members must move to puppet-on-k8s together.

- enable profiles::puppet::migrate for roles::infra::storage::vault

Reviewed-on: #562
Co-authored-by: unkin-agent <unkin-agent@unkin.net>
Co-committed-by: unkin-agent <unkin-agent@unkin.net>

hieradata/roles/infra/storage/vault.yaml

@@ -1,4 +1,6 @@
 ---
+profiles::puppet::migrate::enabled: true
+
 profiles::vault::server::members_role: roles::infra::storage::vault
 profiles::vault::server::members_lookup: true
 profiles::vault::server::data_dir: /data/vault