Create puppet manifest for hitch

Hitch is the TLS termination proxy that varnish uses. We should configure it to make the web UI https-protected.

---

Migrated from T930 (view on Phabricator)