fix: move primary_datacenter to region/role

- set syd1 as primary consul datacentre
- add consul.service.consul zone
- add nginx reverse proxy for consul webui
- set dns zones/acls/views/keys to be deep merged from hiera
- update default token
- add consul/consul.service.consul/consul.main.unkin.net to vault cert

hieradata/country/au/region/drw1/infra/storage/consul.yaml

@@ -1,3 +1,4 @@
 ---
 profiles::consul::server::bootstrap_count: 3
 profiles::consul::server::raft_multiplier: 10
+profiles::consul::server::primary_datacenter: 'au-drw1'