sysadm-provisioning: stop storing the tfstate alongside the code

Now that we are using a tad more rancher cluster, there may be leaky outputs. As the azure production already uses an azure storage backend for storing the tfstate. Align (roca) production, admin and staging terraform manifests to do the same.