Companion PR: https://github.com/edx/edx-analytics-pipeline/pull/204

Work around a supervisord bug causing the provisioning to hang intermittently.

update s3 configuration to use custom credentials s3 backends

New playbook and role for go-server

New playbook and role for go-agent

Install optional credentials requirements

Jibsheet/migrate multiple databases

OPS-727 Sandbox platform name and logo

ECOM-3778

N.B. This may break docker-based devstacks. Fix TBD.

pre_supervisor expects to run the migrate tests as the supervisor user,
which does not have sudo.  Add an env variable flag that allows you to
claim "I know what I'm doing, don't sudo".

migrate-edxapp-lms is templated to know if a given image points to 1, 2
or even 3 databases.  We don't have that knowledge in pre_supervisor
without parsing lms.auth.json for DATABASES and adding a bunch of
special-case logic.

This dates from when our code was if lms/cms, else xque, else
new_service.  Now that lms/cms are lumped into new_services, name it
services.

This allows us to run `edxapp-migrate-lms --list` for migration checking

When we have multiple DBs, this will do the right thing.

Does so by running the edxapp role just to generate config (as
controlled by check-migrations.sh's use of the --tag) and then
the tasks in the playbook are hardcoded to always run, regardless
of the tag.  Because the edxapp play has run, the tasks have
access to the various config variables containing DATABASES
and can tell what DBs are in use.

Skip the read replica

Fix analyticstack

Update readme to match the current state of things.

Include ORGANIZATIONS_API_URL_ROOT in programs defaults

This setting is used when requesting data from the LMS Organizations API.

restructure notes_api deployment

Remove almost all references to syncdb 🔥🔥🔥

Make check-migrations script exit with proper status on errors

Django 1.8 removed the syncdb command so we can no longer run it, don't
imply that we are running it in documentation/messages, also don't
provide the scripts used on devstack/sandboxes to run it since they'll
never work anyway.

Additionally - remove yet another openid workaround which is unnecesary
since the Django 1.8 upgrade.

add config for jwt auth feature flag

DEVOPS-3685 ensure tools gets the same version the mongo play installs

While fixing a downgrade from 3 -> 2 on tools, ensure this role uses the
same version the mongo_3 play uses.