Add an icinga check on whether the puppet agent is enabled

Sometimes, we disable the puppet agent with puppet agent --disable; we should have an icinga check for this, to avoid forgetting to enable it again.

I suggest warning after 4 hours, and erroring after 24 hours.

---

Migrated from T2566 (view on Phabricator)